External access problem

Currently reading
External access problem

3
0
NAS
918+
Operating system
  1. Linux
Mobile operating system
  1. Android
Hello,
I have a Synology 918+ and I'm using DSM 6.2.

I would like to enable external access using DDNS. I have DDNS set up and working.
Snímek obrazovky pořízený 2023-03-03 15-56-44.png


I have the certificate generated via let's encrypt. However, my_name.synology.me gives me a connection error.

After trying to set up the router I ran into a problem.
Snímek obrazovky pořízený 2023-03-03 15-56-07.png


I have a router (mikrotik) to which I have a NAS connected. In addition to it, I also have a unifi AP for WIFI. How should I do the bridge setup and for which of the 2 devices? Are there any downsides / risks?
 
Hello,
I have a Synology 918+ and I'm using DSM 6.2.

I would like to enable external access using DDNS. I have DDNS set up and working.View attachment 12335

I have the certificate generated via let's encrypt. However, my_name.synology.me gives me a connection error.

After trying to set up the router I ran into a problem.
View attachment 12336

I have a router (mikrotik) to which I have a NAS connected. In addition to it, I also have a unifi AP for WIFI. How should I do the bridge setup and for which of the 2 devices? Are there any downsides / risks?
Welcome to the forum.

Do not use the "router configuration option" inside DSM. just open the ports on your edge device (router) and maintain it there.

To get Lets Encrypt cert open incoming 443 and 80 TCP port and cert generation will work. This will ofc depend on the fact that your ISP allows for such incoming traffic, but guess you will soon find out if that will work or not.

So, use mikrotik to open ports and take it from there.
 
Upvote 0
Do I understand correctly that port 443 is open for the Internet from the outside, but is closed on the home network?
Can you guide me to check if they are open?

It is safe to pent it?
Is it necessary to open port 80 as well? I would like to prevent some ransomware or something similar from getting into the NAS.
 
Upvote 0
Last edited:
I'm able to do this by opening port 80 alone, which I do temporarily to allow the cert confirmation to complete. Then the port forward is removed.
 
Upvote 0
Do I understand correctly that port 443 is open for the Internet from the outside, but is closed on the home network?
Can you guide me to check if they are open?

It is safe to pent it?
Is it necessary to open port 80 as well? I would like to prevent some ransomware or something similar from getting into the NAS.
For any ports you choose to open, I recommend strong account passwords, implementation of 2FA for at least your admin account(s), and consider port redirection.
 
Upvote 0
Last edited:
I'm able to do this by opening port 80 alone, which I do temporarily to allow the cert confirmation to complete. Then the port forward is removed.
My certificate is confirmed. Did you mean in synology?
Snímek obrazovky pořízený 2023-03-07 14-20-18.png

-- post merged: --

For any ports you choose to open, I recommend strong account passwords, implementation of 2FA for at least your admin account(s), and consider port redirection.
OK, I set up 2FA on all accounts. This gives me secure login via the administration interface.
But I don't know how to forward the ports. Respectively, I have port 443 redirected to the default port for https on synology (5001).
But that brings me to the beginning of my question. The URL from the certificate does not work (error connection) and the network check reports a problem with two routers.
 
Upvote 0

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Old thread notice: There have been no replies in this thread for quite some time. The last reply was on .
The content in this thread may no longer be relevant. It might be better to open a new thread instead.

Similar threads

Had simelar issue last Thursday. Router and 1 NAS worked, 2 NAS’s didn’t! This occurred as I was adding...
Replies
5
Views
678
External Access is generally there to configure outside services that will allow for external access like...
Replies
1
Views
2,481
Just to add here that I've had to move to a different platform as I have never found the solution to get...
Replies
5
Views
1,250
Okay! The only thing I was wondering, I'm doing all this so that my friend in another country can connect...
Replies
7
Views
2,457
I would recommend to invest in a decent firewall. What is provided as a standard by providers, is...
Replies
4
Views
1,989
You can if your router support it. So it’s not impossible in general
Replies
15
Views
9,787

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top