ASUS RT-AC68U vs. Synology

[meep]

Hi everyone,

I am the new owner of a RT-AC68U and so far everything is going fine - except one simple thing. Behind my router sits a Synology DiskStation and the WebUI interface for Synology is located on port 5000.

I can access the Synology by hitting http://192.168.1.52:5000 (by forwarding port 5000). But I wish to access the Synology from my external IP. I have a domain called http://synology.mydomain.com which maps to my external IP.

But for some reason I am not able to forward port 80 -> 5000. In my struggle I came across the Asuswrt-Merlin which I thought would solve my problem, but so far no luck!

What are the steps to forward port 80 -> 5000?

Things I've tried:

• Authentication Method: HTTPS
• HTTPS Lan port: 8443
• Enable Web Access from WAN: NO
• UPNP: Allowed internal port range: 1-65535
• UPNP: Allowed external port range: 1-65535
• Enable Firewall: NO
• Turned off all services in USB Application
  

This is my Port Forwarding setup:

What am I missing? I just want to access the DiskStation from my domain (port: 80)

Jan

 

[InkyRag]

Change 80 to 5000 in the port range section of your second entry and Login using this: http://synology.mydomain.com:5000 You can delete the entry labeled DiscStation as the one port forward will work internally and externally. Port 80 is for your web interface and no port forward is necessary.

 

[meep]

So there is no way to access it without using the port? :-(

 

[InkyRag]

So there is no way to access it without using the port? :-(

The web interface or the drives? Externally no. Internally yes for both. Internally you would just use the IP to access the web interface and you would map or create shortcuts to the drive. Externally you have to use port forwarding.

 

[RMerlin]

A couple of things here:

1) You really do not want to enable HTTP access to your NAS over the Internet. Forwarding an HTTP interface (instead of HTTPS) means anyone can intercept your password in the clear over the Internet, and then use it to remotely access your NAS. Never open access to any web interface that isn't HTTPS.

2) Forwarding port 80 will mean that it will get tons of break-in attempts on a daily basis from bots, malware, crawlers and other critters randomly trying entire IP ranges. Using a non-standard port will reduce the amount of noise hitting your network.

3) Don't disable the router firewall, as port forwards are actually implemented as firewall rules. Disabling the firewall will definitely prevent any port forward from working.

 

[TonyH]

Hmmm,
Reminds me of the importance of understanding the basics, Sigh!!
Active knowledge vs. passive knowledge.

 

[meep]

Thanks for providing useful information, RMerlin and InkyRag. I will make sure my Synology is not present on port 80, and it will be running on https.

TonyH: Keep in mind I am trying to learn the basics. I am in no way a server/router expert, so please, instead of just ranting - try to push me in the right direction.

 

[montr]

I have an Asus RT-N66U and a Synology NAS. I setup an OpenVPN with TCP port 443 on the Asus Router and an OpenVPN with UDP port 1194 on the Synology. On the Asus router, I just had to forward port 1194 to the NAS IP.

With this simple setup, depending where I am and the firewall in between, I can access my home network (and NAS) using OpenVPN on port 443 or 1194.

 

[Ramorous]

I have a DS1812 on an AC66U and if you utilize Synology's cloud settings (Quickconnect) you don't need to do any port forwarding. They'll set you up with a domain to open it and all, basically something like "ABC123456789.quickconnect.to" and boom, you're at your login page, all offered up through HTTPS, works great for Photo station as well.

When you are on our local lan, hit up the same address and it will just forward you to the local IP. Very nice feature.

Which DSM version are you running? I think this is only available for DSM5+

 

[meep]

Thanks for your replies.
I am running the latest DSM5 release. I have made my Synology only run though https now and it will forward any http -> https. Still I am unable to access it though https://synology.mydomain.com - what are the steps to forward https (443) to my 5001 port (synology https port)? I can not seem to get it working.

Also as a note, I have enabled firewall and etc. again.

Rookie here.

 

[hollandog]

you need to check if your ISP have your port 80 blocked.
many ISP blocks it to prevent attacks.

I use optimum online and with the higher tier service they have the option for me to open port 80 at my own risk. for people looking to host server, etc.

once your ISP opened your port 80 you can do the usual port forwarding and it should work.


Again, make sure you force all http -> https and you can get a free OpenSSL cert to get rid of the warning message.

 

[bigmag]

@meep

Hi
did you get it so you have access from the outside

I have a ds-713 + for years and doing very well

 

[tstacosnb]

Thanks for your replies.
I am running the latest DSM5 release. I have made my Synology only run though https now and it will forward any http -> https. Still I am unable to access it though https://synology.mydomain.com - what are the steps to forward https (443) to my 5001 port (synology https port)? I can not seem to get it working.

Also as a note, I have enabled firewall and etc. again.

Rookie here.

Try https://synology.mydomain.com:5001 and set Port Forwarding like this:

Service Name /Port Range /Local IP /Local Port /Protocol
Diskstation /5001 /192.168.1.52 /5001 /TCP

 

[Sniegov]

Hi

Router or network card on your pc have a problem with loopback.
You'll not access to it by your domain when u are in the same network
and using windows on pc strange but with android works fine. I got same issue.

Maybe put into host file name of your domain like:

192.168.1.52 synology.mydomain.com
or
192.168.1.52 www.synology.mydomain.com

file is in folder: c:\windows\system32\drivers\etc

Peter.

 

[ParanoiA]

On the router , I forward 5000:5001 to the reserved ip of my syno. Also set up dhcp reservation so ur syno always gets same local ip. In syno setting you may want to tell it redirect http to https