How can I keep my DS218 secure from outside connections?

Topics including remote access and management can go here, including port forwarding, telnet, ssh, and advanced network settings.
Forum rules
1) This is a user forum for Synology users to share experience/help out each other: if you need direct assistance from the Synology technical support team, please use the following form:
https://myds.synology.com/support/suppo ... p?lang=enu
2) To avoid putting users' DiskStation at risk, please don't paste links to any patches provided by our Support team as we will systematically remove them. Our Support team will provide the correct patch for your DiskStation model.
User avatar
about
I'm New!
I'm New!
Posts: 7
Joined: Tue Oct 31, 2017 4:42 pm

How can I keep my DS218 secure from outside connections?

Postby about » Fri Nov 03, 2017 3:15 am

I just got my first Synology system, along with a couple of WD Red drives, but haven't started setting it up yet. What are some good practices to keep it secure from outsiders if it's connected to the internet through my router? I'm not too network savvy when it comes to using a NAS, so I don't fully understand the stuff I'm reading: Set up a SSL, VPN, change ports, disable UPNP, etc.
mikele
I'm New!
I'm New!
Posts: 5
Joined: Fri Oct 27, 2017 12:44 pm

Re: How can I keep my DS218 secure from outside connections?

Postby mikele » Fri Nov 03, 2017 7:24 am

AFAIK, routers' default setting don't allow incoming network connections, you would need to open ports to allow that... that means that you can connect, use and setup your DS without worries.

If you want to have external access to it, but don't want to go through the technical challenges of dealing with router's settings, QuickConnect is your best bet.

This blog post explains things quite clearly...
https://blog.synology.com/?p=2283
I suggest to read through all the comments to get an idea of what are common concerns.

If anything I suggest to enable HTTPS everywhere available, just because it is easy to do from the DSM control panel.

I am no expert... but I am going through the same situation.. setting up a new DS, my first one, and I don't want to, accidentally, end up being hacked.
I choose the hard way (router's port forwarding) and after a couple of months into this learning journey, I am not done setting up the device yet.
User avatar
vassil_bk
Student
Student
Posts: 76
Joined: Mon Aug 15, 2016 9:14 am
Contact:

Re: How can I keep my DS218 secure from outside connections?

Postby vassil_bk » Fri Nov 03, 2017 11:01 am

Check out this article: https://www.wijngaard.org/hardening-acc ... d-prepare/
I found it very useful an year ago when setting up mine.
VASKION.com
User avatar
eaz
Ace
Ace
Posts: 710
Joined: Sun Mar 04, 2007 9:04 pm

Re: How can I keep my DS218 secure from outside connections?

Postby eaz » Fri Nov 03, 2017 11:28 am

And run the synology security advisor app from the control panel.
Please share if a reply was useful or how the issue was solved, it helps other DS users.

DS415+ (2*4TB HD raid1 + 2*480GB SSD raid1), DS212+ (2*WD red 2TB), previous DS411J, DS106
mikele
I'm New!
I'm New!
Posts: 5
Joined: Fri Oct 27, 2017 12:44 pm

Re: How can I keep my DS218 secure from outside connections?

Postby mikele » Wed Nov 15, 2017 1:48 am

vassil_bk wrote:Check out this article: https://www.wijngaard.org/hardening-acc ... d-prepare/
I found it very useful an year ago when setting up mine.


great resource, thanks for sharing!

Return to “Remote Access and Network Management”

Who is online

Users browsing this forum: No registered users and 2 guests