2 Replies Latest reply on Oct 8, 2019 8:24 AM by dlhotka

    Open gate in host's firewall for certain process in guest

    Wladca Novice

      Fusion 11.1.latest-official

      V.M. uses "Share with my Mac networking"

      Goal: Windows 10 guest machine joins Windows Update Delivery Optimization network. WUDO peers are in physical local network the host machine works in.

      If some process with server function (actually a process in peer2peer communication with peers operating in host's local network) runs on guest is it the 'vmnet-natd' for which one needs to open port in host's firewall for inbound traffic? If not 'vmnet-natd' which one is it?

      Or will appropriate port-forwarding rules in nat.conf file suffice?

        • 1. Re: Open gate in host's firewall for certain process in guest
          Wladca Novice

          I am still not lucky with enabling WUDO between Fusion guest and a peer operating in physical LAN the Fusion host is connected to.

          All WUDO peers have their firewalls open for all types of WUDO traffic.

          Guest's host OS has it firewall open for inbound traffic coming to 'vmnet-natd'.

          WUDO peers are configured to look for Windows updates in Internet, however LAN's gateway to Internet has its firewall closed for WUDO peer2peer traffic.

          In Fusion port forwarding is set for ports 7680 and 3544 (WUDO service default ports).

           

          If to take look into statistics in WUDO gui all peers gathered updates from Microsoft so far. According to same statistics one peer made about 250MB of WUDO uploads to PC in local network,

          however there is no peer in network which would have this amount received from some peer.

           

          No glue which elements else my setup lacks.

          Any ideas?

          Can I miss some additional service to be run on each peer?

          Does "Share with my Mac networking" support

          • 2. Re: Open gate in host's firewall for certain process in guest
            dlhotka Virtuoso

            For something like that you might need to use bridged networking.  The mac firewall may be blocking it.