Internet from outside the nas

[jeraisel]

Hello

I have a ds200+ and running dsm 7.2.

I'd like to access the nas from behind a proxy server with limited connection, so it would have to be an https connection, and use the nas connection to navigate freely, without the constraints.

I was thinking maybe a browser that I'd access through the nas web page... but I'm open to better suggestions

Thank you

 

[Rusty]

RP is one way to go, or you can set up a VPN connection and get access to the NAS that way.

 

[jeraisel]

I tried to use vpn, but I can't, probably because the vpn port is blocked. Tried also to set vpn port to https, but didn't work either

 

[Rusty]

Well, in order to help out you will have to give a bit more information. What did you try exactly, what VPN protocol, what router/isp provider, what network setup, etc...

 

[jeraisel]

Thank you for your reply
I'm behind a corporate firewall, and it doesn't seem to let pass the vpn protocol, only https or http.
The vpn protocol I tried was openvpn.
So I don't know much about the network specifics.
Do you have a better idea than make a page with a browser in it?

 

[Telos]

I'm behind a corporate firewall

We can't/won't help you circumvent your employer's IT policy. Instead, ask your IT group for assistance.

Or... use your phone's data network.

 

[fredbert]

There should be no issue with accessing Internet websites from a corporate LAN through its forward proxy and other security controls… assuming they don’t classify the destination as malicious.

If your ISP has assigned you a static or dynamic Internet IP address then you can setup router port forwarding to the NAS. Using the Login Portal settings in Control Panel you can setup various ways to access using a personal or synology.me domain.

Addn.: I wouldn’t advocate using a VPN from inside the corporate LAN to another private network, even if you find a way that works, especially if you are doing using corporate devices. You may find that doing so is contrary to the acceptable user policy and might be considered as misconduct.

 

[jeraisel]

well, I'm in IT, and of course I don't know everything. So I have to use sites and videos with tutorials or explanations. Most of these sites are blocked. The systems administrator is from another department and is more than happy to make everything difficult for us, I guess it's company culture.
there's one of two ways I can access the sites I need to get things done:
Waste my personal time at home
Ask for permission to access the site, which usually take 2 weeks to a month

I don't want to waste my personal time anymore, I got better things to do with it. This could be a way to stop that practice.

That's why I am trying to do this, not to access undesirable content

 

[fredbert]

OK. So how does accessing the NAS from behind the corporate proxy help? Are you considering running Proxy Server and accessing it from a reverse proxy rule, enabling authentication for using the FP? You’d set your web browser to use the NAS’s FP?

You may find that TCP 21 is also allowed out. Sometimes 8080 too.

This is specifically knowingly bypassing the corporate Internet access controls, from what you are saying.

 

[Telos]

This is specifically knowingly bypassing the corporate Internet access controls, from what you are saying.

And this is something SynoForum supports?

 

[fredbert]

And this is something SynoForum supports?

My point being that just because it is possible doesn’t mean that it is compliant to a corporate acceptable use policy. Initially the scope was to access the NAS from the corporate LAN, which would be little different to accessing any other permitted destination.

As for if it’s possible, and if it is is it wise, to use the NAS as an public web proxy (even if user auth is enabled) then that moves the goalposts to accessing otherwise blocked destinations. I was theorising if it was possible because I’ve never tried it and would not want to have such an accessible service.

At present we don’t know if there’s a corporate AUP or if it’s inter-dept. wrangling. It could be AUP is OK but there’s a limit on accessing sites like YouTube because non-work viewing. The instance here is stated to be work-related. However, it’s more likely not to be blocked and the AUP states a personal restraint, overstepping it could result in HR and reviews etc.

 

[Fortran]

And this is something SynoForum supports?

Conversely, is this something that is for Synoforum to police? Is it even possible for Synoforum to police such things, even if it were desirable? This forum has no contract with the OPs place of work.

We're simply discussing technical information / knowledge here...there's nothing illegal about such information. Any illegality / contravention of corporate policy(s) thay may or may not be occuring is a function of how this information is applied, not the information itself...and surely only the OP is in a position to weigh this up?

After all, it's the OP who takes the consequences if they decide to use this knowledge in a way that knowingly contravenes any contract they may be working under.

This authoritarian tendency is creeping through society and imo it goes very much against the spirit of openness and knowledge-sharing that enabled people like me to establish careers in IT all those years ago, and that seems a shame.

 

[jeraisel]

ok, thanks anyway

It would help accessing the knowledge when I need it, and not time delayed. Especially using my time. I'd be more comfortable with this solution than opening a vpn or using a remote desktop software to my home, even if it was possible.

Thank you for your words Fortran

 

[Telos]

It would help accessing the knowledge when I need it, and not time delayed

This is an issue to take up with your employer. Either you have the tools for your job, or you don't, and if you don't then the responsibility is yours to communicate.

is this something that is for Synoforum to police?

Police? Why? I don't see that suggested.

There's a simple COC here. If management is hamstringing employee productivity, then they should be made aware of the need, and the implications of inaction.

If I don't have the tools to do my job, I communicate that upward.

 

[Fortran]

We can't/won't help you circumvent your employer's IT policy. Instead, ask your IT group for assistance.

This is specifically knowingly bypassing the corporate Internet access controls, from what you are saying.

And this is something SynoForum supports?

Police? Why? I don't see that suggested.

Policing in the sense of enforcing rules that are made by and for the benefit of other parties. The 1st 2 quotes are responses to a poster looking for technical information; they seem to be suggesting that the forum shouldn't offer technical help because of a (presumed) contract that may exist between the poster and their employer.

Its policing because this (presumed) contract is none of our business, and is purely a matter for the OP to consider. We're on a technical forum, and the point of fora such as these is to help spread technical knowledge and help others with their IT problems. It's not to ensure that we also agree with the uses that technical knowledge may or may not be put to. The OPs question did not involve any illegality or incur any liability to the forum, so imo it seemed to be arbitrarily unhelpful and even authoritarian to respond in this way.

Where do we draw the line? Do we withold advice on HDD replacement until we're sure that the content of those HDDs is not illegal? Do we stop sharing knowledge of how to circumvent Synology's HDD whitelist, paticularly as this probably does directly infringe on the licencing terms of DSM? I think it's important to draw a clear distinction between sharing knowledge / tech advice and making judgements on what posters may or may not be intending to do with that technical knowledge. The latter is - assuming its not illegal - not in our control or purview, nor should it be.

 

[ed.j]

ok, thanks anyway

It would help accessing the knowledge when I need it, and not time delayed. Especially using my time. I'd be more comfortable with this solution than opening a vpn or using a remote desktop software to my home, even if it was possible.

Thank you for your words Fortran

Could this help?

How to Install Firefox on Your Synology NAS

Trustworthy expert guide to your Synology NAS.

mariushosting.com

Combined with Quickconnect into your NAS? Not sure if it would work...

 

[jeraisel]

Could this help?

How to Install Firefox on Your Synology NAS

Trustworthy expert guide to your Synology NAS.

mariushosting.com

Combined with Quickconnect into your NAS? Not sure if it would work...

Interesting, thank you. I'll try to make it work



As for communicating upwards, I've worked there for over a decade and my colleagues too, everybody knows this limitation, if it's not solved it's because no one cares. Development isn't the company core business, so it doesn't even ring any alarms

 

[jeraisel]

Hi

I've configured Quick connect and as far as I can tell, I have no access to a browser in there.
And the docker Firefox needs a browser to access it.

Any ideas?