Ken has a good write-up of a feature
we found while working on a customer’s SMB networking issue: SMB is incompatible with (overload) NAT.
This is amazingly broken, and seems to me like an excellent opportunity for a DoS in a terminal server environment. Regardless, Ken’s walk-through of his debugging procedure is worth a read.