> Unfortunately, disabling uPnP these days is too much of a hit to convenience
Why ? Its only used for torrents and some games, just note down their port numbers and enable those in your firewall once, thats it.
My NAS exposes itself over the internet without permission
11–20 of 311 posts
Re: My NAS exposes itself over the internet without permission
#12You “agreed” and gave your permission when you bought a product with mystery functions. Look at all the Einstein’s who buy smart TVs and then become baffled when they start showing ads.
Re: My NAS exposes itself over the internet without permission
#13What.The.Actual.Fuck.
Re: My NAS exposes itself over the internet without permission
#14What does the author mean that the NAS punched a hole through the firewall? They say it several times. Do they mean enabled port forwarding on the router? If so, that seems like a router issue.
Routers have this thing called universal plug and play which enables applications to enable port forwarding on their own without the user having to dive into router firewall settings.
Re: My NAS exposes itself over the internet without permission
#15> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
Do you have a router you recommend? Ideally something running free software
Re: My NAS exposes itself over the internet without permission
#16> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
I also found this weird, and this got me to check if it was enabled on my business firewall devices: turns out they don't even support UPnP. Is it just consumer routers that support it nowadays? Shouldn't that feature just be nuked?
EDIT: Well it sounds like a feature for pro users that know what they are doing and control all devices on the network. Even then, security appliances (eg. from SonicWall) don't support it. I don't know, this is probably a niche feature for a few occasions.
Re: My NAS exposes itself over the internet without permission
#17The JSON config is strange, the keys contain type information. But any JSON parser worth its salt should not require that since JSON is natively typed, no?
Re: My NAS exposes itself over the internet without permission
#18> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
The issue is letting untrusted or badly behaved devices on the network. UPnP works great, if you control which devices get on your network.
Static port forwarding combined with DHCP gets annoying quickly, you end up having to set up static assignments for every device that may need a port forwarded, which can be a lot, with modern multiplayer gaming and p2p.
And for applications that select a random port on startup, such as some bittorrent clients, you either have to manually forward the port every time or select a static port.
UPnP serves a purpose and is extremely convenient, as long as you trust the devices on your network.
Re: My NAS exposes itself over the internet without permission
#19> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…
Doesn't TrueNAS (was FreeNAS) connect to iXsystem servers from the NAS and from the NAS web interface?
Re: My NAS exposes itself over the internet without permission
#20> Unfortunately, disabling uPnP these days is too much of a hit to convenience Why ? Its only used for torrents and some games, just note down their port numbers and enable those in your firewall once, thats it.
You mean "enable them all over again for every new DHCP assignment, unless you insist on static IP assignments".