How to access Synology NAS over the Internet.

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › How to access Synology NAS over the Internet.

quebec

852 posts

Ultimate Geek

#160538 10-Jan-2015 18:18

Hi all, I have been trying to set up my Synology NAS so it can be accessed over the internet. I have followed all instructions, opened port 5000 for DSM access and also set up DDNS, setting in DSM show everything is running fine,logs also suggest that DDNS is working fine, I still can't access it, any clues where I am going wrong? I am able to ping the host name from within the network.
Thanks

1 | 2

meow
13243 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1211648 10-Jan-2015 18:19

Please understand the risks and make sure your device is updated.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

quebec

852 posts

Ultimate Geek

#1211650 10-Jan-2015 18:23

michaelmurfy: Please understand the risks and make sure your device is updated.

Device is updated but what are the risks? Even if I am only storing multimedia on the drive? Any idea why it wouldn't work?

blakamin

4431 posts

Uber Geek
Inactive user

#1211657 10-Jan-2015 18:31

People doing port scans and searching for devices just like yours... Personally, I wouldn't open any file storage to the net. I have an IP cam i do open but it has a massive PW and gets port forwarded thru 2 routers on random, high number ports. AND it's only turned on when I reaaaally need it. (relatives dog staying).

freitasm

BDFL - Memuneh
79266 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1211659 10-Jan-2015 18:35

Up until recently the Synology NAS had a vulnerability that allowed people to login remotely from the WAN side. This allowed some people to load those crypto trojan that encrypt the content of your NAS and ask for money to decrypt it - a non-problem if you have backup somewhere else. Also they had last year a worm that spread around Synology NAS devices that basically took all the CPU power to create bitcoins for the perps.

Yes, you have to be aware of the risks. If you aren't and can't keep it secure and up-to-date, better not do it.

If you do it anyway, port forward, make sure the router firewall and the Synolog firewall aren't blocking the port in use and you should be able to access - if you do make sure you use the secure port (https) instead of the non-secure version (http).

quebec

852 posts

Ultimate Geek

#1211665 10-Jan-2015 18:41

Well I just want to see it working once. Port is not being blocked as canyouseem.org reports it to be open - Success: I can see your service on xxx.xx.x.xx on port (5000)
Your ISP is not blocking port 5000
Anything else to check for?

freitasm

BDFL - Memuneh
79266 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1211666 10-Jan-2015 18:42

Is the router port forward really going to your NAS? Are you using UPNP?

quebec

852 posts

Ultimate Geek

#1211668 10-Jan-2015 18:44

freitasm: Is the router port forward really going to your NAS? Are you using UPNP?

Yes router port forward is going to NAS internal IP and not using UPnP.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Sideface

9354 posts

Uber Geek

Trusted

Lifetime subscriber

#1211678 10-Jan-2015 18:59

quebec: Hi all, I have been trying to set up my Synology NAS so it can be accessed over the internet. ..

Danger, Will Robinson

Sideface

quebec

852 posts

Ultimate Geek

#1211682 10-Jan-2015 19:03

Ok an update, it works on http if I forward port 80 to NAS internal IP or forward port 80 to port 5000? Does this mean I need to forward port 80 too for it to work?
And also for some reason I am not able to make it work on https, port 443/5001 won't open/forward for some reason.

quebec

852 posts

Ultimate Geek

#1211690 10-Jan-2015 19:20

Ok https works but along with port 5001 I have to forward port 443 too for it work, is this normal?

PoHq

466 posts

Ultimate Geek

#1211692 10-Jan-2015 19:29

Here is a bit of a basic tutorial from Synology ref secure web access to the Diskstation.

https://www.synology.com/en-uk/knowledgebase/tutorials/478

I recently got a DS414. I have web access enabled. I've followed everything on the guide and also enabled 2 step verification via an authenticator app.

My password is over 45 characters long.

timmmay

20579 posts

Uber Geek

Trusted

Lifetime subscriber

#1211714 10-Jan-2015 19:51

All software has bugs, if you do this your data will be accessible to others on the internet, the only question is how difficult it is for them.

PoHq

466 posts

Ultimate Geek

#1211717 10-Jan-2015 19:56

Agreed. Nothing is foolproof by any means. You either use it or you don't and if you are going to use it make it as secure as you can. That way if anything happens you know you did all you could have done and you won't be kicking yourself thinking that admin abc123 user password combo wasn't my best idea. :-)

Mark

1653 posts

Uber Geek

#1211742 10-Jan-2015 20:24

As a heap of other people have said in various ways .... "DON'T DO IT!!" :-)

Otherwise all your files run the risk of becoming someones else files as well, or even better your NAS becomes a handy repository for other peoples files (which may interest the police in a really bad scenario).

khull

1245 posts

Uber Geek

#1211864 11-Jan-2015 08:43

Synology has proven in the past that security isn't their field. Although their response to fix them can be swift. I still own them.

Don't to it.

If you really must, get another Synology that is exposed to then net and keep the other as a mirror backup.

1 | 2