Having trouble accessing NAS through WAN

[osker246]

So I have a qnap ts-431 which I am trying to access through a web address provided by qnap cloudlink application, (NAS name).myqnapcloud.com. Every time I try to access my NAS via the internet I get prompted with the routers login page. I've gone into the settings and tried enabling and disabling "Enable Web Access from WAN" in the system tab. I can't figure out how to by pass the router page to log into my NAS.

I have UPnP enabled which maps a majority of the ports correctly according the NAS. The ports that are not porting properly are FTP/FTPS (20,21), SSH Server (22), and Remote Replication (873,8899). If I try to manually open those ports the NAS reports an error that none of the ports are open. I'm not quite sure what to do from here. Can anybody please help me?

 

[coxhaus]

UPNP is an out bound function but if the ports are being held open by the cloud then this should work. Do you by chance have 2 firewalls or double NAT by not having your modem in bridge mode? What internet connection and mode do you have?

You will want to have a password on your FTP. Probably already there but I was just checking.

 

[osker246]

Hi Coxhaus,

Forgive me. I only know basics when it comes to networking. I have disabled the firewall on my router and the NAS does not have one from what I can tell. I use a motorola surfboard sb6120 as my modem. From what I read on a quick search it only acts as a bridge and not a NAT. In the router I do have NAT enabled as well.

Also when you say put a password on my FTP. Do you mean a password on my NAS thats trying to utilize those ports?

 

[coxhaus]

I don't think you want to disable your firewall. NAT is a good thing. What is the IP address on your WAN side on the router? You may need a public IP address.

When this is all said and done just make sure you have a password for FTP. It is a primitive protocol.

 

[osker246]

Well I solved the problem. Although I am not sure if I did it the correct way. I enabled DMZ and pointed the traffic to my NAS. Was this an appropriate method or should I reconsider it? By enabling DMZ does this cause conflicting issues with other ports that I have forwarded to other machines for remote access?

 

[L&LD]

You put your NAS in the DMZ?

You are sharing your files with the world.

 

[osker246]

You put your NAS in the DMZ?

You are sharing your files with the world.

Isn't that what I'm essentially doing when using the web link host.myqnapcloud.com? It uses qnaps ddns to forward to my WAN address. Nobody can access that NAS without a user login/password. Should I not do it this way?

Sent from my XT1575 using Tapatalk

 

[L&LD]

Isn't that what I'm essentially doing when using the web link host.myqnapcloud.com? It uses qnaps ddns to forward to my WAN address. Nobody can access that NAS without a user login/password. Should I not do it this way?

Sent from my XT1575 using Tapatalk

I guess that using the myqnapcloud.com ddns is equivalent, but no, I would not do it like that.

This is what VPN is for (so you don't expose your network devices to the world).

In the DMZ, everyone has all the time in the world to keep guessing at login / password combo's. And they already know the login is 'admin'.

 

[osker246]

I guess that using the myqnapcloud.com ddns is equivalent, but no, I would not do it like that.

This is what VPN is for (so you don't expose your network devices to the world).

In the DMZ, everyone has all the time in the world to keep guessing at login / password combo's. And they already know the login is 'admin'.

Well you convinced me to switch off DMZ. Cool thing is I can still access the NAS. I don't know what the issue was but it seems to be working now.

Sent from my XT1575 using Tapatalk