Change port 5000 to 80 or 443

[HelloMonkey]

As I cannot access by port 5000 at my office, can I change the port to 80 or 443?

Many thanks.

[HarryPotter]

No, you cannot change port 5000 for WebUI (unless you dont change from http to https which is using port 5001)

If your router allows to redirect ports you can externaly use another port which is then redirected to internal 5000 by your router

[october]

dear sir,

i guess "hellomonkey" is having the same problem as i do.
it would be nice if user can change the WebUI port by himself.

btw, which router does port rediect function?

thanks

[HarryPotter]

btw, which router does port rediect function?

Most of modern router do

[october]

cool! would it be a function (say eg linksys) port triggering?
i am going to buy a new router now.... the one i am using now does not support redirect (level one) :<
will go for linksys

many thanks!

[HarryPotter]

No, port triggering is something else. As far as I understand this expression it means that a program can send informations to the internet from a port and receive the response on another port.

I guess the correct function you have to check is "port redirect" or similar.

My D-Link DSL-2640B doesnt make a difference between forwarding and redirect, its the same menu where I have to configure the incoming AND the outgoing port for every rule.

I had a Level-one (1407) too and I think it had the possibility to redirect, but I cant remember how it was called there (unfortunately the power adapter is dead, therefore I cant check it again)

[october]

thanks so much.

[wizjos]

Hi all,

HarryPotter wrote: No, you cannot change port 5000 for WebUI (unless you dont change from http to https which is using port 5001)

In my humble opinion it is possible by changing httpd.conf-sys in /usr/syno/apache/conf. Just scan for 5000 and change it to the port you like to use....
When I scan for 5000 I get two hits:
Listen 5000 (on line 40) and
ServerName *:5000 (on line 95)

Then restart: /usr/syno/etc.defaults/rc.d/S97apache-sys.sh restart

Regards,

Wizjos

[october]

oh wow.... interesting to look into it. thanks for your advise

Here, if admin does not mind, i have a brief review on routers.... (i got 4 routers now )

Level-One WBR-3408
I have been using it for 2 weeks. it is very stable product. UI design is very simple but hard to understand.

Linksys WRT54GCv2
another 2 weeks. The outlook is great and UI is user-friendly (at least i use this product before).

Zyxel P-335WT
Borrow from my friend. I just played around with it for few hours. At least, UI is not too hard to understand. But the outlook is not attactive....

DLink DIR-300
If it was not because too late to read Harry's reply... i should buy D-Link. I tried it last night. The port redirect function is the best! also, this function can never be found from the product above (within their latest firmware). UI not bad.

Port 5000 to 80
Definitely, if your office block port 5000, D-Link redirect function can help: public port 80, private port 5000
But if you would like to use original 80 port for photo and blog, you can try: public port 443, private port 5001
and set your synology to use https (with security)

Port 80 (blocked by ISP) Redirect
That is the stupid problem that my ISP blocked port 80 for many years, however, i noticed it just 2 weeks ago....
Another reason i have got 4 routers now....
This is the worst situtation: office block port 5000 and 5001, ISP block port 80.
I have searched in internet, and found some idea.
1. no-ip.com: they provide a function call "port 80 redirect" and allow someone from external uses port 80 and redirects to other assigned port, say 1234. Then, in your router receive 1234 and redirect back to 80. but because it charges, so i did not really try it.
2. dyndns.com: webhop function will forward you to use another doman:port. user will see the change on port in address bar

I am very happy with my setting right now.
hope all you enjoy.

And thanks Harry!

[Neo]

2. dyndns.com: webhop function will forward you to use another doman:port. user will see the change on port in address bar

I'm also using DynDns, but I tried your setting, which still doesn't work for me from the office !

[Nesty]

There's another way doing this. It's not a solution to your problem. It's a workaround. Basically you can tunnel the port through ssh or something like that.

So what you do is download putty for example. Then you ssh into your synology as admin. Make sure you're logged on.
Go to the putty configuration and go to Connection > SSH > Tunnels. In source port add any port which isn't blocked by your Office firewalls. Eg 9999, 1337, 6666 whatever. They can't all be blocked. Then select Dynamic and click Add.

Then go to IE or Firefox or whatever you use then go to the network settings.
For IE it's in Internet Options > Connections > Lan Settings > then tick Use a proxy server for your lan > Advanced
For Firefox go to Options > Advanced > Network > Settings > Manual proxy configuration
Change the Socks address to "localhost" (without speech marks) and add the port that you selected earlier.
Apply all the changes.

Basically what this does. Simplified. It tunnels your own internet connection on your synology at home through the port you assigned to your machine. So you're bypassing your internal firewalls and network and using your home connection to browse. You can then go to any site you want without being blocked.

The only problem with this is that if you use any internal sites on you intranet you won't be able to access them while you have this setting. What I do at work is have Firefox for my own personal use and I use IE unmodified to browse our intranet.

[october]

I'm also using DynDns, but I tried your setting, which still doesn't work for me from the office !

Dear Neo,

There are few factors... so i cannot make assumption on your environment.
I tell you my setting.
1. On router: setup your dyndns login/password/domain (e.g. abc.dyndns.org)
2. On dyndns.com: add new hostname (this is the link you and your friend use), e.g. xyz.dyndns.org
3. under xyz.dyndns.org, use webhop: http://abc.dyndns.org:8080/

break here: i use 8080 because my ISP block port 80....

4. On router: port redirect public port 8080 to your NAS IP and private port 80
5. On router: port redirect public port 443 to your NAS IP and private port 5001
6. On NAS (mine is 207+): Admin page -> Network Service -> Web Service -> Check Enable HTTPS connection -> Check Automatically redirect web management UI to a secure channel

Addition thing i have done:
7. Check Enable Web Station
8. write an easy index.php file and save into web folder which includes:
<a href=http://abc.dyndns.org:8080/photo/>Photo</a>
<a href=https://abc.dyndns.org/>Admin</a>

Again, my ISP blocked port 80, so i have to use 8080.
Unlike no-ip.com, dyndns.com will show that webhop link explicitly 8080.
when my router see 8080, it forwards to NAS port 80

for https, default port 443, therefore, i don't need to specify in my link.
when my router see 443, it forwards to NAS port 5001

Therefore, when using
http://xyz.dyndns.org
webhop forward me to
http://abc.dyndns.org:8080
and i will see my index.php with 2 shortcuts and can get into my NAS

There is no exact solution for everyone. I tested and got this config with many error and trail. But hope this can help you.

Lastly, you have to find out which ports are open for both office network and your ISP. Then, you can draw a picture on your setup.

Also, you can check others reply as reference, because they are useful as well.

Beside:
I checked D-Link DI-804-HV, DDNS setting accept no-ip.com which is real Good. But it does not have wireless and very expensive

[Neo]

thanks for the reply, but I think I'll have to give up.
It turns out that my office is implementing quite strict rules on the firewall. Since yesterday they block port 443 completely.
So I can't SSH into my NAS anymore. I used to be able to use www.logmein.com to connect securely to my pc and use that to ssh into my NAS, but now that has been blocked too.

If anybody has a solution on how to overcome this, I'll be happy to try it out!
Anyway, many thanks.

[gunnar-DS207]

Here's a caveat I encountered just now:

I had my 207+ properly hooked up today for external access via port 80.
(My DLink router at home can do internal remapping of port 5000 to 80, using a Dlink router feature named "Virtual Server").

However from a remote location, where I only have port 80(http) or 443(https) access, some minutes ago I was logged in on the admin interface and figured it would be a good idea to enable https So I went along and created my own server cert and key and uploaded it along with enabling https in the admin UI.

Only thing I didn't realize is that https on the ds207+ runs on port 5001, so this means my router remapping is currently invalid. The standard https port is 443.
So it means I lost further remote access to my 207+ until I can get back home and change the router mapping to 5001->443.

[mortenbn]

Port 5000 to 80
Definitely, if your office block port 5000, D-Link redirect function can help: public port 80, private port 5000
But if you would like to use original 80 port for photo and blog, you can try: public port 443, private port 5001
and set your synology to use https (with security)

Don't know if I've misunderstood something (I'm not the sharpest tool in the shed, when it comes to networking), but I had to make both
"public port 80, private port 5000"
AND
"public port 5000, private port 80"
redirects in my router, before I could access my DS from work.
Or have I made some terrible security-mistake in doing so?

Works like a charm now, though