How to access shared folders on firewall ?

How to access shared folders on firewall ?

Hi, Yesterday i met one issue, i need to connect a windows 2003/2008 server to another windows PC only for accessing a shared folder. So, which ports should i open on the firewall?

Firewall ports for folder sharing 

The following ports are associated with file sharing and server message block (SMB) communications:

Microsoft file sharing SMB: User Datagram Protocol (UDP) ports from 135 through 139 and Transmission Control Protocol (TCP) ports from 135 through 139.

Direct-hosted SMB traffic without a network basic input/output system (NetBIOS): port 445 (TCP and UPD).

Sharing a folder or file creates a Windows Firewall exception for File and Printer Sharing. The exception opens the ports listed in the following table.

Simply use these Ports for file and folder sharing on windows firewall

In the search box, type "firewall,"
then click on "Windows Firewall."
Click on "Advanced Settings."
Double-click on "Inbound Rules."

Make sure the lines "File and Printer Sharing (NB-Session-In)" and "File and Printer Sharing (SMB-In)" are checked.

Double-click on "File and Printer Sharing (NB-Session-In)" and select the tab that says "Scope" and change the remote address setting to "Any IP Address" then click "OK."

Repeat on the line that reads "File and Printer Sharing (SMB-In)."

I also wanted the server to ping on the net so I did the same with the setting for "File and Printer Sharing (Echo Request - ICMPv4-In).

I also wanted name resolution, so I adjusted the scope for File and Printer Sharing (LLMNR-UDP-In) and (NB-Name-In).

and create new rule on inbound and select specific port

TCP

139, 445

and create another rule and select specific port

UDP

137, 138

The default scope is to allow access from any computer on the network, including computers on the Internet. Unless you block incoming connections on these ports using a hardware firewall, firewall server, or other Internet-sharing device, your computer will be vulnerable to attack from the Internet as long as your Internet connection is active.