How to Block my Nas

[TrebleTA]

So I have a old NAS device and I want to block it on my Asus AX82U so it only has local network access, yet still let the NAS device recive times and date syncs from Wan?
Current FW of my Asus AX82U 3.0.0.4.388_24906

 

[TrebleTA]

I'm having what they say is a blonde moment and just cant work it out :S

 

[Ripshod]

Why? If you want to protect your NAS from bad actors on the web don't forward any ports. Accessing an external time server shouldn't expose anything. Or let your router serve the time over ntp.

 

[Crimliar]

And disable any remote access apps that run on the router.

 

[TrebleTA]

so its a old WD MY cloud. it will auto try to connect to the wan. so i'm want to block all wan access and then let the time throu as i have said, how do i do so?

 

[ColinTaylor]

You should make clear that your "AX82U" is actually a DSL-AX82U rather than an RT-AX82U as that may effect what options are available to you. That said, I don't think there's anything available in stock firmware that would allow you to block WAN access while creating an exception for NTP (although you could block all WAN access). However, if you were to use Gnuton's custom firmware that would open up the possibility of scripting bespoke firewall rules.

 

[TrebleTA]

Think what I did before was put the NAS on the network service filter, deny list with all ports but the time port, which I think is UDP 123?

P.s for now I've just blocked all WAN access, was easier in the app, that made a rule in Parental Controls time scheduling.

What port is the NTP?

 

[ColinTaylor]

Yes, that's a good point. I wasn't sure whether stock firmware allowed you to specify a range of ports, but it looks like it does. So you just need to allow UDP port 123.