NASLite Network Attached Storage

www.serverelements.com
Task-specific simplicity with low hardware requirements.
It is currently Sun May 04, 2025 7:56 am

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 11 posts ] 
Author Message
 Post subject: FTP security question
PostPosted: Sat Nov 25, 2006 8:14 am 
Offline

Joined: Thu Aug 24, 2006 3:13 pm
Posts: 58
Are there any plans to include even the most basic security into the FTP side of NASlite2? I had hoped to share my NAS box with my son to allow data to be passed between us but as there is no account or password, as soon as I allow access from the internet to my NAS box it's open to the world!


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 8:43 am 
Offline

Joined: Sun Feb 27, 2005 11:08 am
Posts: 225
whilst i am not a developer i can say what has been said in the past.

The security model of NASLite is specifically designd not to have any kind of user authentication other than to change settings on the box.

This is as opposed to something theya re getting around to doing.

I would say it is fairly certain the answer will be no.

As for opening NASLite to the world i humbly suggest that is a VERY bad idea.


Top
 Profile  
 
PostPosted: Sat Nov 25, 2006 1:03 pm 
Offline

Joined: Sun Jul 09, 2006 10:26 am
Posts: 428
Location: UK
lencuff wrote:
Are there any plans to include even the most basic security into the FTP side of NASlite2? I had hoped to share my NAS box with my son to allow data to be passed between us but as there is no account or password, as soon as I allow access from the internet to my NAS box it's open to the world!


Hi lencuff,

What you can do though is install a FTP server to your main pc and then map to your nas drives, within the FTP program you will be able to create user account and passwords.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 1:42 pm 
Offline

Joined: Thu Aug 24, 2006 3:13 pm
Posts: 58
Hi Gaiden,
That's certainly something I could look at. Just seems a shame I have laods of stuff my son wants to get at and at the moment we have to use an external USB drive to transfer betwen us. Just wanted to use the technology available!


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 2:21 pm 
Offline

Joined: Sun Feb 27, 2005 11:08 am
Posts: 225
lencuff i feel for you.

However i dont want to speak out of place here but i get the feeling you have not ran a public ftp site before. (No malice intended)

The reason i say this is that a public ftp is hammered with people tying to get into it.

If someone finds a ADSL type conenction with an ftp it invariably means their is somehting worth having on it.

I would recommend going the VPN route. Give your son a VPN client and let him connect to you network using that. VPN router as cheap as chips now and theres been some didcussion on home made one on ehre as well (search for IPCOP).

If you go this route you will be secure and he can use anything on your network from NASlite to your printer


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 2:32 pm 
Offline

Joined: Thu Aug 24, 2006 3:13 pm
Posts: 58
Hadn't thought of that! We both have Linksys routers which have VPN capability so I'll go down that route! Many thanks.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 4:54 pm 
Offline

Joined: Sun Feb 27, 2005 11:08 am
Posts: 225
your very welcome.

two same vedor router should be fairly easy to join your two LANs. After you make this work you wont rememebr when you didnt have it :)


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 5:21 pm 
Offline

Joined: Sun Jul 09, 2006 10:26 am
Posts: 428
Location: UK
fat wrote:

However i dont want to speak out of place here but i get the feeling you have not ran a public ftp site before. (No malice intended)

The reason i say this is that a public ftp is hammered with people tying to get into it.


Hi Fat,

I have ran a private FTP server and when I looked back at the logs I never ever had any hammering on the door, But then again it was not a always on server, more of a case of only when needed and once the transfer was complete the server was closed.

I agree VPN is the way to go though.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 25, 2006 5:33 pm 
Offline

Joined: Sun Apr 02, 2006 9:05 pm
Posts: 1688
Location: Up State NY in the USA!!!!
The FTP port is one of the ones that are hammered on by defult on my firewalls logs. I think that if they see it they will try and get in, it don't matter if it is an FTP or a https or what ever. If it is there and secured they will try and get in. Go the VPN route and all will be good.

Mike


Top
 Profile  
 
PostPosted: Sat Nov 25, 2006 5:52 pm 
Offline
Site Admin

Joined: Tue Jul 13, 2004 4:11 pm
Posts: 1771
Location: Server Elements
lencuff wrote:
Are there any plans to include even the most basic security into the FTP side of NASlite2? I had hoped to share my NAS box with my son to allow data to be passed between us but as there is no account or password, as soon as I allow access from the internet to my NAS box it's open to the world!


NASLite variants in general are designed as LAN data containers. The reason FTP, HTTP, etc, are included in the export protocol list is to allow any and all TCP/IP enabled clients to access data stored on NASLite. You can access NASLite content with practically anything, including a PDA.

Placing a NASLite server on a WAN should be done only with the clear understanding of what's at stake. A VPN, as mentioned above, is the best approach for tunneling content across a WAN.


Top
 Profile  
 
PostPosted: Sun Dec 10, 2006 2:29 am 
Offline

Joined: Sun Sep 17, 2006 2:30 pm
Posts: 30
I have used HFS and Hamachi with decent results:

http://www.rejetto.com/hfs/
http://www.hamachi.cc/

Granted both programs have to be resident on a windows box or maybe a windows Vmware image of sorts.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 11 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 10 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group