Steven, Please add a Reviewed-by: Ronnie Sahlberg <lsahlber@xxxxxxxxx> for the patch in the link below : http://www.spinics.net/lists/linux-cifs/msg12842.html I have tested this patch using samba and iptables. Testing : Connect to an smb2 share. On server, add these iptable rules : sudo iptables -I INPUT 1 -p tcp --dport 445 --tcp-flags SYN,RST,ACK,FIN SYN -j ACCEPT sudo iptables -I INPUT 2 -p tcp --dport 445 -j DROP Eventually the Keepalives that are not responded to result in a TCP session reconnect followed by a Negotiate Protocol request. With this patch, every few minutes the client will reconnect a new TCP session and try NegotiateProtocol again. Without this patch, the client is stuck waiting for the first Negotiate Protocol forever. regards ronnie sahlberg -- To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html