Accessing Windows shared drives behind a router

I would like to move a Windows 2008 R2 server from the WAN side of a PfSense router to the LAN side (this is all on VMware Esxi 5.1).  But I still want clients on the WAN side to be able to access the shared drives of the server.

Outbound traffic on the router (LAN to WAN) is unrestricted.  I assume this involves using NAT to map ports on the WAN router IP to LAN IPs.  But what ports need to be opened?  How do the users on the WAN side set up their mapping.

This must be a common scenario.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You could use WebDav to do this through IIS
dakota5Author Commented:
Based on your recommendation, I started reading about this.  Yes, it could work, but I need something simpler, with less overhead.  I have several workstations and servers to put behind a router.  There must be some standard way of doing this.
You could use a VPN, which would be secure, but with a little more overhead. You could also use FTP.
If you do want to open ports on your router and Nat to a network share, you are basically opening your network to a ton of vulnerabilities. It can be done though. I think the MS filesharing ports are..
• Microsoft file sharing SMB: User Datagram Protocol (UDP) ports from 135 through 139 and Transmission Control Protocol (TCP) ports from 135 through 139.
• Direct-hosted SMB traffic without a network basic input/output system (NetBIOS): port 445 (TCP and UPD).
I would not recommend opening your router up though..

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dakota5Author Commented:
Thank you for your precise answer.  Works perfectly.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.