My NAS exposes itself over the internet without permission
1–10 of 311 posts
Re: My NAS exposes itself over the internet without permission
#2> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions.
Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall.
If the author really cares, go one step further and replace the ISP owned router with something with more control.
Finally, if one cares about the software one's NAS runs, build or buy from someone like TrueNAS.
Re: My NAS exposes itself over the internet without permission
#3I've never enabled uPnP, and get by just fine.
Re: My NAS exposes itself over the internet without permission
#4"CAN USER NAME AND PASSWORD OF TNAS ADMINISTRATOR BE CHANGED?
Administrator’s username is admin and the initial password is admin as well. "
https://www.terra-master.com/us/faq/category/detail/?id=3303
Oy.
Re: My NAS exposes itself over the internet without permission
#5What does the author mean that the NAS punched a hole through the firewall? They say it several times. Do they mean enabled port forwarding on the router? If so, that seems like a router issue.
Re: My NAS exposes itself over the internet without permission
#6What does the author mean that the NAS punched a hole through the firewall? They say it several times. Do they mean enabled port forwarding on the router? If so, that seems like a router issue.
Welcome to uPnP.
Re: My NAS exposes itself over the internet without permission
#7> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
Edited: deleted my comment as I was unintentionally offensive.
Re: My NAS exposes itself over the internet without permission
#8What does the author mean that the NAS punched a hole through the firewall? They say it several times. Do they mean enabled port forwarding on the router? If so, that seems like a router issue.
UPnP is added to the NAS that allows it to request ports to be open and mapped.
There is software needed on the router side too to make it work. They don’t want to disable this.
This is covered in the article.
Re: My NAS exposes itself over the internet without permission
#9> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
Edited: deleted my comment as I was unintentionally offensive.
Is there a reason why the software claims it’s not available over the internet but still is because of something it did?
Because that’s a bug.
Re: My NAS exposes itself over the internet without permission
#10I'm confused. Some significant length was gone to in attempting to interrogate the device and modify it in such a way that it wouldn't try to open uPnP ports anymore. Further, a lot of devices try to leverage uPnP by default, and many of them are significantly more opaque than this NAS proved to be. However, the author doesn't want to just disable uPnP in their router and manage forwarding directly due to a perceived loss of convenience.
Surely, first discovering by happenstance that a devices is doing this in the first place, then trying to figure out how to go through idiosyncratic & unsupported means to change the device's behavior, is significantly less convenient than updating a router/firewall config rules in supported standard predictable ways on occasion?