NASLite Network Attached Storage

www.serverelements.com
Task-specific simplicity with low hardware requirements.
It is currently Sun Apr 28, 2024 3:18 am

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: Sat Jul 29, 2006 12:56 pm 
Offline

Joined: Tue Jul 25, 2006 10:27 pm
Posts: 7
Location: Portland, Oregon USA
I've jut got my NAS up and running and things seem to be working great. I know that there isn't any security or access control built into the system but is there someway that I could work around that? I'd like to get secure access via http.

I'm thinking maybe some sort of proxy server that could listen to a particular port that I had forwarded to my NAS? I've done some looking around but just don't have enough know-how to figure it out?

Any advice? Thanks.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Jul 30, 2006 7:02 am 
Offline

Joined: Sun Feb 27, 2005 11:08 am
Posts: 225
Simply place your NASlite box in a DMZ on your firewall and use IP based rules.

If you need username and password authentication you will need some sort of proxy as well however i wouldnt recommend allowing access via HTTP to the web.

NASlite has a design principle of being open. This means that essentially there was no reason during the devlopemnt to look at securing anything since it was always meant ot be open. Naslite is also not designed to be public internet facing.

I humby suggest that you dont do this.

However if you MUST do this and see the risk as acceptable to you then i would suggest the following.

Place NAS on a DMZ. On this DMZ place another box. INstall Apache on this box. Remote mount the NASLite drives on the apache box and then present them via apche and .htaccess control. Consider always having secure firewall rules as well.

I do predict though that you will live to regreat this :(


Top
 Profile  
 
 Post subject:
PostPosted: Sun Jul 30, 2006 11:55 am 
Offline

Joined: Tue Jul 25, 2006 10:27 pm
Posts: 7
Location: Portland, Oregon USA
Thanks for the sound advice. I will have to consider it. My goal is to just be abel to acccess my files from work or when I'm away from my LAN.

Is there another alternative to the procedure you described? I have tried VNC from work but my corporate firewall blocks it somehow.

Thanks.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Jul 30, 2006 1:12 pm 
Offline

Joined: Sun Feb 27, 2005 11:08 am
Posts: 225
there are many ways you could do this.

First find a port thats open outbound from your office. Likely candidates are 80,443,110,22 etc

Ince you have found it you could simply may this open port to your naslite ftp port/http port

i.e. on the internet it is 443 and on you nas box it would ve 80.

Then set your fireall to only allow connections from 1 IP.

Heres the kicker... anyone in your office can access and delete your files. I wouldnt recommend this.

If i were you i would look at a secure encrypted type connection using say SSH or a VPN.

SSH would be my choice in your scenario (guessing between the lines at what you have there).


Top
 Profile  
 
 Post subject:
PostPosted: Sun Jul 30, 2006 2:23 pm 
Offline

Joined: Sun Jul 09, 2006 10:26 am
Posts: 428
Location: UK
Run a FTP server on your windows machine, if you have one.
then create a virtual drive to the nas drives or folders.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 204 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group