Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




586 posts

Ultimate Geek
+1 received by user: 20


Topic # 160538 10-Jan-2015 18:18
Send private message

Hi all, I have been trying to set up my Synology NAS so it can be accessed over the internet.  I have followed all instructions, opened port 5000 for DSM access and also set up DDNS, setting in DSM show everything is running fine,logs also suggest that DDNS is working fine,  I still can't access it, any clues where I am going wrong? I am able to ping the host name from within the network.
Thanks

Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
Mr Snotty
8074 posts

Uber Geek
+1 received by user: 4050

Moderator
Trusted
Lifetime subscriber

  Reply # 1211648 10-Jan-2015 18:19
6 people support this post
Send private message

Please understand the risks and make sure your device is updated.






586 posts

Ultimate Geek
+1 received by user: 20


  Reply # 1211650 10-Jan-2015 18:23
Send private message

michaelmurfy: Please understand the risks and make sure your device is updated.

Device is updated but what are the risks?  Even if I am only storing multimedia on the drive?  Any idea why it wouldn't work?

 
 
 
 


Aussie
4314 posts

Uber Geek
+1 received by user: 1264

Trusted
Subscriber

  Reply # 1211657 10-Jan-2015 18:31
One person supports this post
Send private message

People doing port scans and searching for devices just like yours... Personally, I wouldn't open any file storage to the net. I have an IP cam i do open but it has a massive PW and gets port forwarded thru 2 routers on random, high number ports. AND it's only turned on when I reaaaally need it. (relatives dog staying).

BDFL - Memuneh
61756 posts

Uber Geek
+1 received by user: 12413

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1211659 10-Jan-2015 18:35
3 people support this post
Send private message

Up until recently the Synology NAS had a vulnerability that allowed people to login remotely from the WAN side. This allowed some people to load those crypto trojan that encrypt the content of your NAS and ask for money to decrypt it - a non-problem if you have backup somewhere else. Also they had last year a worm that spread around Synology NAS devices that basically took all the CPU power to create bitcoins for the perps.

Yes, you have to be aware of the risks. If you aren't and can't keep it secure and up-to-date, better not do it.

If you do it anyway, port forward, make sure the router firewall and the Synolog firewall aren't blocking the port in use and you should be able to access - if you do make sure you use the secure port (https) instead of the non-secure version (http).







586 posts

Ultimate Geek
+1 received by user: 20


  Reply # 1211665 10-Jan-2015 18:41
Send private message

Well I just want to see it working once.  Port is not being blocked as canyouseem.org reports it to be open - Success: I can see your service on xxx.xx.x.xx on port (5000)
Your ISP is not blocking port 5000
Anything else to check for?

BDFL - Memuneh
61756 posts

Uber Geek
+1 received by user: 12413

Administrator
Trusted
Geekzone
Lifetime subscriber



586 posts

Ultimate Geek
+1 received by user: 20


  Reply # 1211668 10-Jan-2015 18:44
Send private message

freitasm: Is the router port forward really going to your NAS? Are you using UPNP?


Yes router port forward is going to NAS internal IP and not using UPnP.  

4356 posts

Uber Geek
+1 received by user: 2656

Lifetime subscriber

  Reply # 1211678 10-Jan-2015 18:59
2 people support this post
Send private message

quebec: Hi all, I have been trying to set up my Synology NAS so it can be accessed over the internet. ..

Danger, Will Robinson frown





Sideface




586 posts

Ultimate Geek
+1 received by user: 20


  Reply # 1211682 10-Jan-2015 19:03
Send private message

Ok an update, it works on http if I forward port 80 to NAS internal IP or forward port 80 to port 5000?  Does this mean I need to forward port 80 too for it to work?
And also for some reason I am not able to make it work on https, port 443/5001 won't open/forward for some reason.



586 posts

Ultimate Geek
+1 received by user: 20


  Reply # 1211690 10-Jan-2015 19:20
Send private message

Ok https works but along with port 5001 I have to forward port 443 too for it work, is this normal?

400 posts

Ultimate Geek
+1 received by user: 137


  Reply # 1211692 10-Jan-2015 19:29
Send private message

Here is a bit of a basic tutorial from Synology ref secure web access to the Diskstation.

https://www.synology.com/en-uk/knowledgebase/tutorials/478 

I recently got a DS414. I have web access enabled. I've followed everything on the guide and also enabled 2 step verification via an authenticator app.

My password is over 45 characters long.





14276 posts

Uber Geek
+1 received by user: 2590

Trusted
Subscriber

  Reply # 1211714 10-Jan-2015 19:51
3 people support this post
Send private message

All software has bugs, if you do this your data will be accessible to others on the internet, the only question is how difficult it is for them.




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


400 posts

Ultimate Geek
+1 received by user: 137


  Reply # 1211717 10-Jan-2015 19:56
Send private message

Agreed. Nothing is foolproof by any means. You either use it or you don't and if you are going to use it make it as secure as you can. That way if anything happens you know you did all you could have done and you won't be kicking yourself thinking that admin abc123 user password combo wasn't my best idea. :-) 







1369 posts

Uber Geek
+1 received by user: 348


  Reply # 1211742 10-Jan-2015 20:24
3 people support this post
Send private message

As a heap of other people have said in various ways ....  "DON'T DO IT!!"  :-)

Otherwise all your files run the risk of becoming someones else files as well, or even better your NAS becomes a handy repository for other peoples files (which may interest the police in a really bad scenario).



1245 posts

Uber Geek
+1 received by user: 137


  Reply # 1211864 11-Jan-2015 08:43
Send private message

Synology has proven in the past that security isn't their field. Although their response to fix them can be swift. I still own them.

Don't to it.

If you really must, get another Synology that is exposed to then net and keep the other as a mirror backup.

 1 | 2
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.