My NAS exposes itself over the internet without permission • Hacker News Board

Re: My NAS exposes itself over the internet without permission

#21

Post by rahimnathwani » Sat, Apr 03, 2021, 4:55 PM UTC

9091 might be for the transmission web UI

Re: My NAS exposes itself over the internet without permission

#22

Post by LeanderK » Sat, Apr 03, 2021, 4:55 PM UTC

I use a lot of software/devices which I think is using UPnP (airplay, airdrop, pioneer dj pro link, maybe the printer etc.). There's talk here about disabling UPnP but does that mean that the devices wouldn't be able to find each other? I don't want to babysit my router.

Or aren't they using UPnP? Quick googling wasn't successful. I thought most of those autodiscover-services use UPnP.

Re: My NAS exposes itself over the internet without permission

#23

Post by annoyingnoob » Sat, Apr 03, 2021, 4:56 PM UTC

ancarda wrote: post #15

alias_neo wrote: post #2

> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…

Do you have a router you recommend? Ideally something running free software

OPNsense or pfSense

Re: My NAS exposes itself over the internet without permission

#24

Post by iso1210 » Sat, Apr 03, 2021, 4:56 PM UTC

KozmoNau7 wrote: post #20

IceWreck wrote: post #11

> Unfortunately, disabling uPnP these days is too much of a hit to convenience Why ? Its only used for torrents and some games, just note down their port numbers and enable those in your firewall once, thats it.

You mean "enable them all over again for every new DHCP assignment, unless you insist on static IP assignments".

Why wouldn't I use static dhcp?

Re: My NAS exposes itself over the internet without permission

#25

Post by vidarh » Sat, Apr 03, 2021, 4:56 PM UTC

Don't know if it's true for this model, but at least some Terramaster NAS's are just x86 computers [EDIT: I see the model in the article is an ARM box, but also that it's already running a Terramaster specific Linux distro, so just nuking most of the Terramaster specific stuff might be easier than trying to find a way to do a clean reinstall].

For at least some of the x86 ones, you just need the right cable to connect to a suitable monitor, and it can boot from a USB drive. You don't need the VGA cable to replace the OS, but it helps a lot. You may have to dismantle the whole thing to get at the boot drive, but they're pretty easy to take apart.

First I did with mine was to install Open Media Vault.

Re: My NAS exposes itself over the internet without permission

#26

Post by annoyingnoob » Sat, Apr 03, 2021, 5:00 PM UTC

I'd argue that the right approach is to replace the ISP router with your own and disable uPnP, for your own security. Otherwise its only a matter of time before you see this again. You cannot count on having only trusted devices on your network.

Re: My NAS exposes itself over the internet without permission

#27

Post by sandreas » Sat, Apr 03, 2021, 5:02 PM UTC

Once more a sad story about so called plug and play devices doing weird stuff. I prefer getting my hands a bit dirty using:

  - FreeNAS / NAS4free / OpenMediaVault (for Home-NAS)
  - OpenWRT / OPNsense / PFSense (for Home-Firewall)

Nearly Plug and play with this Hardware:

  - Dell T20 / T30 / T40
  - HP Microserver N54L / Gen8 / Gen10
  - Linksys WRT 1200 / 1900 / 3200 / 32X (https://dc502wrt.org/)
  - Alix APU

Re: My NAS exposes itself over the internet without permission

#28

Post by kalleboo » Sat, Apr 03, 2021, 5:05 PM UTC

LeanderK wrote: post #22

I use a lot of software/devices which I think is using UPnP (airplay, airdrop, pioneer dj pro link, maybe the printer etc.). There's talk here about disabling UPnP but does that mean that the devices wouldn't be able to find each other? I don't want to babysit my router. Or aren't they using UPnP? Quick googling wasn't successful. I thought most of those autodiscover-services use UPnP.

There are 2 parts to UPnP.

One is service discovery, in cooperation with zeroconf (aka bonjour/mDNS). This is handled 100% by devices themselves.

The other is the port forwarding protocol, where devices can ask your router to open a port in the NAT to the wide internet forwarded to them. This is done in the router. It's also a potential massive security hole.

If you disable UPnP on your router, you only disable the second thing. The first thing keeps working.

Re: My NAS exposes itself over the internet without permission

#29

Post by tyingq » Sat, Apr 03, 2021, 5:07 PM UTC

diarrhea wrote: post #17

The JSON config is strange, the keys contain type information. But any JSON parser worth its salt should not require that since JSON is natively typed, no?

Where? I don't see that. What type info is below? Do you mean "mapList"? I suspect it's just what they chose to name the key.

  "triestimes": 3,
     "mapList": [
       {
           "desc": "ftp",
           "nExternalPort": 6221,
           "nInternalPort": 21,
           "sProtocol": "TCP",
           "bEnable": 0
       },...

Re: My NAS exposes itself over the internet without permission

#30

Post by kalleboo » Sat, Apr 03, 2021, 5:08 PM UTC

alias_neo wrote: post #2

> Unfortunately, disabling uPnP these days is too much of a hit to convenience, so I looked for other solutions. Don't do this, there is no good reason to run UPNP if you care about security, turn it off and learn to manage a firewall. If the author really cares, go one step further and replace the ISP owned router with something with more control. Finally, if one cares about the software one's NAS runs, build or buy…

UPnP is also sometimes used to refer to some forms of zeroconf/mDNS/Bonjour/DLNA.

Maybe he is under the impression if he turns off UPnP on his router (the automatic port forwarding feature), that his LAN device discovery features will break?