firewall

  1. L

    DSM firewall and trusted proxies, am I doing something wrong?

    Hi everyone, this is my first post on the forum although I've been passive reader for a while now. I posted a doubt yesterday on the synology subreddit but it doesn't seem to have attracted much feedback, so I though maybe you people would have some insight. I'm copying below what I wrote...
  2. Telos

    [Firewall] No SMB access via VPN

    Recently I've lost the ability to reach my NAS file when my phone is connected by VPN Server. I've discovered that dropping the firewall allows me to see the NAS files. I'm puzzled by what firewall rule I need to add to obtain SMB file access. I've allowed the VPN IP range...
  3. J

    Firewall rules for Docker subnets?

    Hello, I am trying to utilize the firewall on my ds918+ to limit access to ports on my synology to static ranges within 192.168 and have run into an issue were in order to get my docker containers to play nice with each other I have had to unblock their subnets completely (IP 172.17 and...
  4. AlexS

    Setting up a firewall on DS920+

    I'm a newbie to all this and have started setting up my DS920+ which is really only going to be used as a SMB share for a small business and was wanting to setup some firewall rules to only allow specific internal local IP address through and block all others. How do i do this and i assume i...
  5. B

    Solved plex app vanished from firewall built-in app list

    Hello everyone, Who know I'm luckier here than posts in Synology Forum and Plex Reddit. I had a couple times in the last 2 years issues with an outside connection within plex as ilustrated below. I always could get rid of this kind of error by restarting DSM. This time it was diferent...
  6. JME81

    Question SRM Firewall help

    My current setup: I have a SRM2600ac router and a couple of Netgear switches, one is a PoE switch for external PoE cameras. Those cameras record to a NVR (BlueIris) internally, those cameras and the NVR don't have a gateway address and they are also are set up in the firewall to be denied access...
  7. monfrair

    any users have edgerouter/opnsense/pfsense with rt2600ac network?

    Has anyone set up or used an edgerouter and or pfsense/opnsense for an extra security with their rt2600ac? Looks like a pretty powerful system and was wondering if anyone had this setup using their rt2600ac as the main gateway and the edgerouter for extra firewall protection...
  8. akahan

    Back up Firewall Rules?

    As far as I can tell, DSM provides no way to back up firewall rules. Configuration backup doesn't seem to do it, nor does Hyperbackup. Other than taking a screencap of my ruleset, and then retyping it all back in if I need to restore my system, does anyone know of a way to do this? Am I missing...
  9. K

    Question Firewall rules for VPN Server and Client

    Hi! First time poster here. Bit of background before my question: I've got a 213j in my flat and a 115j at my parents house, they are both used to store backups of local PC's. I've recently started looking into how I can make better use of both NAS's and wanted to use each NAS as an off-site...
  10. iStone

    Solved Block mac address within LAN for NAS

    DSM's firewall setting can block LAN IP address for access to NAS, but DHCP can always assign that PC a new IP, so ... could anyone tell me if possible or how to block a PC with its mac address ( this can be obtained from router interface) thanks!
  11. fredbert

    Info Port forwarding rules not have to generate firewall rules

    I just noticed the Setting button on the General tab of Network Center's Port Forwarding page. Throwing caution to the wind I clicked it and found three options. Two are for UPnP and I have UPnP disabled, but the third, when enabled, will auto-generate firewall rules for the port-forwarders...
  12. daptap

    Is a firewall rule stopping my openvpn connection from local access?

    I have my DS718+ running a vpn server with openvpn protocol. LE certificate is valid. I can connect and view my cameras through Blue Iris ios app (BI is hosted on a local computer). However, when I connect my laptop to the vpn when travelling, I can't access my drives on the DS. Is one of...
  13. johntdavis

    Firewall Rules: Allowed IPs and Threat Prevention?

    Quick question, but probably one that betrays how little I actually understand Threat Prevention at the moment. If I create a firewall rule that allows traffic from a range of IPs, will threat prevention just ignore those? I use a particular remote desktop streaming service that's generating a...
  14. johntdavis

    Firewall Setup Question

    Hello, I have a question about my firewall setup. So far, I've not done anything specific to it. When the router was first plugged in, it asked me to set up a bunch of automatic rules, and I let it do that so I could get through the setup process. Presently, it looks like this: Some of this...
  15. B

    Firewall and IPv6

    Does the synology firewall handle IPv6 now? They says on the following page that it isn't but maybe things changed since: 10 méthodes pour sécuriser l'accès de votre NAS Synology
  16. JME81

    Question Firewall and NTP - help me read this rule

    I've enabled the NTP service on the router so that certain devices can use it. Is this rule needed and is it allowing outside sources into the network?
  17. NSquirrel

    Excellent Series of Synology NAS Tutorials-Mydoodads

    I bought my NAS a year ago and realise that, amongst other aspects, permissions, Photo Station and Moments had created a year-long confusion; well permissions had, partly because I did not start with groups as I had only one or two users. As far as Photo Station and Moments goes, after a short...
  18. JME81

    RT2600ac Firewall Rule Help

    I'm trying to block a device from accessing the internet as well as the internet accessing it. This is more of a precautionary step. Please see attachment, do I have the settings correct?
  19. WST16

    Info Common ports

    According to a networking utility I’m using, all of the below are considered common ports. Avoid using them unless you must (e.g. 25, 80, 443). 1, 7, 20, 21, 22, 23, 25, 42, 43, 53, 69, 79, 80, 88, 106, 110, 111, 113, 115, 119, 123, 135, 137, 138, 139, 143, 161, 177, 194, 311, 379, 389, 427...
  20. WST16

    Tutorial DS VPN Server OpenVPN configuration

    WST16 submitted a new resource: DS VPN Server OpenVPN configuration - OpenVPN to access LAN Read more about this resource...
Top