VPN client functionality

[TIME2DIE]

Quick howto for OpenVpn ports till they implement that feature into the GUI

connect to DiskStation over SSH as root (same user credentials as admin)
I'm using "Putty" on my PC.

After you loged in type "cd .." because you should be in an empty root directory
(type "ls" to find out)
type "ls" to see Directories
type "cd usr" "cd syno" "cd etc" "cd synovpnclient" "cd openvpn"

Okay now u should see 3 files when typing "ls"
Look up vi keycodes
http://www.cs.colostate.edu/helpdocs/vi.html

type "vi ****.conf" <-- name of config file
change port number, default ist 1147

quit by typing ":" "wq"

type "vi ***" (file has no .**)"
edit that file as you did with the .conf file and also save by
typing ":" "wq"

DONE!

[spinxen]

Hi Synology,

I like the idea of the new functionality of a VPN client, but it is a bit limited in its control and use. I would like to see to following features (or maybe they are already possible, but I am not aware):

- start the VPN connection automatically when the Diskstation starts
- a check/test to see if the connection is working and which ip address is has received from the vpn server
- more control which functionality makes use of the vpn connection and which don't. For example a checkbox in the download station, "use vpn client connection only"
- more control when the vpn connection is not running that certain packages will not connect to outside world, they only should run when the vpn connection is up and running (like again the download station)
- the option to change the port number of the openVPN client, a lot of VPN providers do not use the standard openVPN port.

Keep up the good work, love you products.

Thanks,
Frank

This would be awesome!

[iarspider]

Hi Synology,

I like the idea of the new functionality of a VPN client, but it is a bit limited in its control and use. I would like to see to following features (or maybe they are already possible, but I am not aware):

- start the VPN connection automatically when the Diskstation starts
- a check/test to see if the connection is working and which ip address is has received from the vpn server
- more control which functionality makes use of the vpn connection and which don't. For example a checkbox in the download station, "use vpn client connection only"
- more control when the vpn connection is not running that certain packages will not connect to outside world, they only should run when the vpn connection is up and running (like again the download station)
- the option to change the port number of the openVPN client, a lot of VPN providers do not use the standard openVPN port.

Keep up the good work, love you products.

Thanks,
Frank

I agree. There also seems to be a "bug" with the current version of VPN client: it doesn't use DNS servers announced by VPN server. I have to manually switch to Google's DNS every time I connect.

[FredSyS]

Hi,
This is exactly the functions that are missing to be perfect !
(Especially the "use vpn client connection only" checkbox in the download station)
Thank you Synology for this (easy ?) update, and thanx for the good work
Fred.

[b00134n]

I would also very much like a way to automatically run the VPN on startup! I'd also be interested if anyone has a current workaround for how to accomplish this.

[gizmocuz]

+1 ! Port should be an option... please....

[dlpolanco]

Hopefully not a crazy bump, but in any case, signed up just to say I would love to see these features as well!

[jrenard]

Hi Synology,

I like the idea of the new functionality of a VPN client, but it is a bit limited in its control and use. I would like to see to following features (or maybe they are already possible, but I am not aware):

- start the VPN connection automatically when the Diskstation starts
- a check/test to see if the connection is working and which ip address is has received from the vpn server
- more control which functionality makes use of the vpn connection and which don't. For example a checkbox in the download station, "use vpn client connection only"
- more control when the vpn connection is not running that certain packages will not connect to outside world, they only should run when the vpn connection is up and running (like again the download station)
- the option to change the port number of the openVPN client, a lot of VPN providers do not use the standard openVPN port.

Keep up the good work, love you products.

Thanks,
Frank

This small improvement would make such a big difference for me (and I am sure for many users!!)! Can somebody from Synology product management informs us when this feature is planned on their roadmap?

[Martin.N.C]

Hi Synology,

I like the idea of the new functionality of a VPN client, but it is a bit limited in its control and use. I would like to see to following features (or maybe they are already possible, but I am not aware):

- start the VPN connection automatically when the Diskstation starts
- a check/test to see if the connection is working and which ip address is has received from the vpn server
- more control which functionality makes use of the vpn connection and which don't. For example a checkbox in the download station, "use vpn client connection only"
- more control when the vpn connection is not running that certain packages will not connect to outside world, they only should run when the vpn connection is up and running (like again the download station)
- the option to change the port number of the openVPN client, a lot of VPN providers do not use the standard openVPN port.

Keep up the good work, love you products.

Thanks,
Frank

This is excatly what is missing in the VPN client at the moment.

I have been trying to get the VPN client to be more secure, but is missing the options suggested above.

To be able to verify the VPN connection, and to be able to restrict certain packages from connection out whenever the VPN connection gets cut off for some reason is a must before one can rely on this.
Diskstation needs to be able to stop and block all connection to and from outside world when the VPN suddenly disconnects.

I hope Synology development will add these features to the VPN client.

Thank you.

Best regards,
Martin

[v084208]

Hi.

I love the product but I agree with all above. There needs to be more VPN Client functionality.

I am having problems configuring the firewall for the ppp0 VPN Client connection. Noticed that everything seems to be allowed to pass through from the remote network. Tried to restrict the access by entering the rules in /etc/firewall/ppp0.conf but I did not get it to work correctly. It is very important for us not to let any other traffic in other than http access.

An improvement would be to have the VPN Client Connection included in the Firewall Configuration just like the LAN adapters and PPPoE.

Until this is implemented I do however need a workaround and I am not a Linux guy. Is there anybody that has fiddled with this configuration and gotten it to work? My current ppp0.conf looks like below.

Code: Select all

[ADAPTER_ppp0]
        policy=1
[RULE_00001]
        ports=SYS:http
        enabled=1
        source=all
        protocol=3
        allow=0


Best regards and thanks in advance
Håkan

[pitchpuller]

I agree the VPN client is a great idea but it's not really all that usefull now. It would be nice if, in the VPN configuration, you could specify weather a particular app (download station, photo station, etc) or service (http, FTP,etc) "can use" or "must use" a particular VPN tunnel. That would provide easy to understand granular control. Someone might want to use VPN for download station but sending all traffic throught the tunnel might prevent remote access to other services like email and http.

I would like to say great job to the Synology team for thier efforts so far. You truly make an outstanding product that constantly gets better. All of my family and many of my friends now have Synology servers now because I showed them all the great stuff it can do. Thanks for all your hard work.

[dlpolanco]

I agree the VPN client is a great idea but it's not really all that usefull now. It would be nice if, in the VPN configuration, you could specify weather a particular app (download station, photo station, etc) or service (http, FTP,etc) "can use" or "must use" a particular VPN tunnel. That would provide easy to understand granular control. Someone might want to use VPN for download station but sending all traffic throught the tunnel might prevent remote access to other services like email and http.

Excellent idea. I've been so frustrated working with the VPN because if I use it, I lose so many useful apps. I really like the idea of a "granular control" as you mention it. Currently, the VPN is so easy to set up and I love that; I just need more control over what goes through it. For example, I don't want the PPTP VPN server to run through my VPN client.

Also, please make it so that you can change which external address DDNS uses. Currently, my VPN doesn't allow port pass through so DDNS using the VPN as an external address effectively shuts off all remote applications.

I second the thanks for the hard work. I love my NAS at home such a pleasure to use. Currently I have the DS212+ but as my needs grow, I'm going to move up to the Goliath size Syno NASs.

[urbanvictim]

To be frank the lack of these basic features is a massive error on Synology's part and a massive security flaw which judging from lack of response Synology dont really care about. What is the point in having a download station which you cannot verify is secure and which continues to accept traffic when the VPN disconnects??????

Very poor early impressions of Synology for this. If it aint secure and fit for purpose, dont offer it as a service!

[johann.doe]

Hi,
thanks for the summary -> that's what we need!!
PLEEEASE synology, make us happy!!

J.D.

[gambler3k]

Was looking exactly for this...
Since this functions have not yet been implemented (as far i've seen )have someone come up with a work-around solution?
Can't belive there is no respons from synology developers in here..
BIG BUMP!