Routing between networks failing??
-
You can connect from .100. to .0. so the issue isn't routing.
You have a good firewall pas rule on the interface OPT1 ?
The Syno does have options like :
-
@gertjan I have a pass all rule on both LAN (.0) and LAN10GB (.100). Both look like this
Protocol Source Port Destination Port Gateway Queue
IPv4+ * * * * * noneI don't have the options set as your display on Syno options and have never needed them in the past and it has always worked fine. Only thing I have really updated since my last access worked properly is Windows 11 and I would think those Syno options would affect the same network.
As long as the PC is on the same network as the NAS it is working okay. Just when it is on a different network the issue begins.
-
@gertjan Oh yes I am using SMB shares via Windows 11 so think NFS permissions would not be required.
-
@veldthui not sure how pfsense is the issue here.. if you can access the share and view the share.. Pfsense has ZERO way to stop you from writing files to this share - all of that would be over the same connection.
Is if anything is a permissions issue on the nas saying your account can not write..
-
@veldthui First thing comes to mind when you say Win 11 is SMB version. NAS might only work with SMN1 and Win 11 might be 2 or 3.
But you say when you move it back to the same subnet it works so second thing would be Windows firewall.
The NAS is now on a different subnet and that would be blocked in Win Firewall.
Turn it off and see if that fixes it. -
@jarhead synology nas support smb 2 and 3.. I believe they even turned off smb1 a while back, and you would have to do something special to enable it.
I don't think firewall on windows would be it - why would it let you read and copy from something but not write?
Not sure what is going on - but highly unlikely routing or firewall issue, because if that was the case you wouldn't be able to access at all. Its not like writing to smb is a different port or even a different session.
-
@veldthui I would turn it all off, everything - network switches, NAS, PC computer, pfsense firewall box, all of it. Wait like 10 minutes, then plug it all back in and reboot stuff. It sounds kinda ridiculous, but sometimes electronic stuff like this needs to be rebooted. You say...
I have had this setup for ages and has been working fine. Trying to access the NAS I suddenly find I cannot save files to the NAS.
I'm betting a simple reboot of everything brings it back to life.
-
-
Thanks for all the suggestions. I will just leave it on the same network. I did try turning the firewall off as my first thought but it still did it. Am suspecting the latest update to Windows 11 now is the issue though I don't know why the NAS would say my sign in was invalid when using the web interface.
I have a work around so that is all that matters. -
@veldthui possible creds stored? If its on a different IP it thinks its a different device. I don't have windows 11 to play with. Not moving til it for a while I don't think.. 10 works for, so I don't see anything in 11 that would get me to move to it at this time.
But I access my nas from multiple vlans from bunch of different devices. As long as 445 is open for smb, there is nothing else to do on the router. And it sure can not block write but allow read, etc. Your not running IPS are you - maybe there could be something done with IPS?
-
@johnpoz Thanks. I had already removed all the stored credentials and it made no difference just asking me to enter them again as it should. I am running pfBlockerNG but again it has been running with that with no problems for ages and no recent updates. No other IPS software running.
-
@veldthui what is the exact error windows is giving you? And your just using file explorer access a share.. And you can read files, IE copy them from your nas to your pc. But when you try to copy a file to the nas you get what specific error in windows?
-
@johnpoz Windows times out with an error 0x8007003b. It seems to leave a complete file on the NAS but it is not readable by anything and has to be deleted using the NAS File Station. This is with a 29MB file. If I try and upload using the NAS File Station it will time out and say Login Invalid. Sign in again. It does not leave any thing there.
Have bee able to copy TB's of data previously with no issue and can now they are on the same network. -
@veldthui said in Routing between networks failing??:
0x8007003b
That error seems to point to windows firewall or 3rd party security software on your pc.
Since you say it works on same network, this also seems to point to a firewall on your pc not liking the remote IP address.
Are you running any 3rd party security software, Norton? and the Like? I would disable any such software and turn off your windows firewall completely - at least for a test.
Your not using any sort of vpn between your client and the nas are you? Are you running a vpn on pfsense that could be trying to route traffic over a vpn?
-
@johnpoz said in Routing between networks failing??:
@veldthui said in Routing between networks failing??:
0x8007003b
That error seems to point to windows firewall or 3rd party security software on your pc.
Get out!!!
-
@johnpoz Yes, I searched the web for the error and came to the same thought. I disabled Both Nortons and also the inbuilt firewall and it made no difference. Also not using VPN at all internally.
