[Samba] samba4 AD with NATted clients

Reindl Harald h.reindl at thelounge.net
Wed Jul 15 11:25:19 UTC 2015

Am 15.07.2015 um 12:39 schrieb mourik jan heupink:
> We currently run all public ip's inside our network, DC's and
> workstations too.
> We are thinking perhaps to divide our network into a NATed workstations
> segment, but keep our DC's and fileservers IPs public as they are now.
> We are running sernet-samba, mainly win7 clients, using GPO's, shared
> drives.
> I did a quick test on a win7 workstation, put it in the NAT segment,
> configured two DCs as DNS servers. Browsing the internet works, but any
> samba/ad/cifs functionality is lost. (ssh from the NAT to the DC's also
> works, so basic connectivity is there) It's just the active directory
> that seems NOT to work.
> Before looking further into this... is something like this supported?
> Should it work at all? What problems can we expect, and how to solve them?
> Is anyone doing this?

i doubt that will work because there is no broadcasting possible over NAT

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20150715/f6c312e5/signature.sig>

More information about the samba mailing list