External access problem

[tomasr]

Hello,
I have a Synology 918+ and I'm using DSM 6.2.

I would like to enable external access using DDNS. I have DDNS set up and working.

I have the certificate generated via let's encrypt. However, my_name.synology.me gives me a connection error.

After trying to set up the router I ran into a problem.

I have a router (mikrotik) to which I have a NAS connected. In addition to it, I also have a unifi AP for WIFI. How should I do the bridge setup and for which of the 2 devices? Are there any downsides / risks?

 

[Rusty]

Hello,
I have a Synology 918+ and I'm using DSM 6.2.

I would like to enable external access using DDNS. I have DDNS set up and working.View attachment 12335

I have the certificate generated via let's encrypt. However, my_name.synology.me gives me a connection error.

After trying to set up the router I ran into a problem.
View attachment 12336

I have a router (mikrotik) to which I have a NAS connected. In addition to it, I also have a unifi AP for WIFI. How should I do the bridge setup and for which of the 2 devices? Are there any downsides / risks?

Welcome to the forum.

Do not use the "router configuration option" inside DSM. just open the ports on your edge device (router) and maintain it there.

To get Lets Encrypt cert open incoming 443 and 80 TCP port and cert generation will work. This will ofc depend on the fact that your ISP allows for such incoming traffic, but guess you will soon find out if that will work or not.

So, use mikrotik to open ports and take it from there.

 

[tomasr]

Do I understand correctly that port 443 is open for the Internet from the outside, but is closed on the home network?
Can you guide me to check if they are open?

It is safe to pent it?
Is it necessary to open port 80 as well? I would like to prevent some ransomware or something similar from getting into the NAS.

 

[Telos]

I'm able to do this by opening port 80 alone, which I do temporarily to allow the cert confirmation to complete. Then the port forward is removed.

 

[Coop777]

Do I understand correctly that port 443 is open for the Internet from the outside, but is closed on the home network?
Can you guide me to check if they are open?

It is safe to pent it?
Is it necessary to open port 80 as well? I would like to prevent some ransomware or something similar from getting into the NAS.

For any ports you choose to open, I recommend strong account passwords, implementation of 2FA for at least your admin account(s), and consider port redirection.

 

[tomasr]

I'm able to do this by opening port 80 alone, which I do temporarily to allow the cert confirmation to complete. Then the port forward is removed.

My certificate is confirmed. Did you mean in synology?

[automerge]1678195913[/automerge]

For any ports you choose to open, I recommend strong account passwords, implementation of 2FA for at least your admin account(s), and consider port redirection.

OK, I set up 2FA on all accounts. This gives me secure login via the administration interface.
But I don't know how to forward the ports. Respectively, I have port 443 redirected to the default port for https on synology (5001).
But that brings me to the beginning of my question. The URL from the certificate does not work (error connection) and the network check reports a problem with two routers.