firewall

I’ve been using this for the firewall rules of what’s legal or not to make a firewall rule: https://kb.synology.com/en-global/DSM/help/DSM/AdminCenter/connection_security_firewall?version=7 Does any other document exist that delves into more detail of what is legal or not in firewall rules...

Crazy idea: Is it possible (legal) that a firewall rule like this could exist and work? TCP/UDP, all ports, IP RANGE:192.168.1.160-.255, TCP/UDP, all ports, IP RANGE: 192.168.1.2-.159 DENY Not near it to test. Thank you

Hi all! I use Drive server to sync/share files between different clients, both on LAN and off-site, as well as desktop and mobile clients. All clients use the external address to connect (XX.mydomain.com), including the ones on the LAN side. The NAS's certificate is up to date and setup for...

2600 Router, SRM 1.3.1 When I turn off or disable the router's Firewall, the Malicious Events drop by 26X! Why? This investigation started when I noticed a significant increase in Malicious Events when I add Firewall rules to block all countries except the U.S. The ME graph below shows a...

I had blocked all countries except U.S. thinking it would reduce the Threat Protection noise and the Malicious Events daily count dropped from 200 to 3. So now I only have the default firewall settings now. Whats up with that?

Morning lads I'm having some issues with with an IP camera I recently bought (Reolink e1 pro), I've connected it up to Synology surveillance. I set up some firewall rules to ensure only the NAS can access it as I don't trust it's Chinese software. I want Synology to manage everything security...

Ref the 'Let's Encrypt Certificate Renewal' process. This seems to conlict with my firewall. I use geolocking in the firewall and only allow access from the Australia, Great Britain, Ireland, which are the counties where users who access my forum reside. This works great but blocks the 'Let's...

I've 13 Hikvision Cameras that have the latest firmware in them, but firmware pre-dates Last September's Hikvision Security issues.... I do not have remote access turned on any cameras.. and even went so far as to enter an incorrect gateway.... With all this, the cameras work perfectly...

Synology has specific steps on how to "block access between two local networks while allowing communication among certain devices" (How can I block access between two local networks while allowing communication among certain devices? - Synology Bilgi Merkezi) and I've attempted them several...

Ok, I thought I finally had things set up securely but now firewall isn’t blocking properly. Using SRM 1.2.5 (This post ties to @rkruz3 do firewall prevent IPs from reaching TP and firewall blocks still reach TP re: IP range block including @fredbert reference to The Other Place post specific to...

Where do you see firewall logs? In the log centre? I can't see anything relating to firewall in there, does this mean it has never blocked anything? I got the impression NAS users were constantly under attack from hacking attempts so I feel like I'm missing something. If it's just the hacking...

I have setup the router's (2600, V1.2.5) firewall to block entire subnets, e.g. 2.0.0.0 - 2.255.255.255, yet threat IP addresses within this subnet still are dropped by Threat Prevention. I know the firewall is working because I get many hits on the blocked subnet. Is TP before the firewall...

Hi All, I've got a ds218+ setup running Plex/Sab/Sonarr/Radarr in Docker, in the last week I've had someone trying to access DSM using the default admin account. This will not work as the admin account is disabled, however it's annoying as I can see them trying this pretty frequently so I'm...

This is more SRM 1.3.1-1 than RT2600ac specific. Something has been bugging me: I use IPV4 settings here. In SRM settings, I have disabled IPV6, and at bottom of firewall list I have the IPV6 rules that don’t match set for deny. Yet in SRM 1.3.1-1, TWO new firewall rules were added: One of...

If the Firewall has a rule to block an entire IP range, say 45.0.0.1/255.0.0.0, will Threat Prevention still react to threat IP in that range or do those IPs blocked at the firewall not reach TP?

Hi, Question 1 I need to make rules about the access of my smart tv but I have difficulties to know in which order to insert them in the firewall: Source: TV to WAN : Allowed : Svod Source: TV to NAS : Allowed (for plex) Source: TV to LAN: Denied. The kb indicates The SRM firewall applies the...

Hi All, After reading the advice in the forum from experts about other firewall issues, I wonder if my own firewall rules are finally strict enough in my specific context: Router configuration (ports opened/nated) 443 : forwarded to HA Cluster IP which run Synology HTTP proxy server in front...

Hey, those 2 firewall rules are those needed ? And in what situation are those 2 needed ? thx

Hello, I would like to consult if my firewall settings are okay, and if I understand how firewall works correctly. The goals are: - allow access from my home network and remotely from PC at work - allow access just from my country, to minimize attacks from internet (login attempts, etc.) - allow...

Hey guys. awhile ago I had turned off the synology firewall for some reason and haven't been back to it. I'd like to either reastablish it or go with synologies vpn. I know the first thing in firewall is to enable management UI, However when I tried to access it via smb/windows Explore under...