NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
How to secure share
I wonder if someone can help with securing my network storage.
I have a router connected to a Buffalo 1T drive. The router is wirelessly accessible to a dozen devices (all accounted for) which includes two CCTV cameras which save their recordings via ftp on a regular schedule. The camera live images are also observable over http. That drive (and only that drive) is being infected on a regular basis by the SCR trojan which is being caught by my AV defences.
I don't know how that trojan is getting there, so my thought is to reduce the access to the NAS drive until I no longer see it reappearing. Is there some way that I can accomplish this? Ideally, I'd like to be able to specify the access that the cameras, the devices and users can have and systematically deny write access until I find the source.
I think I found the problem.
When I installed the security cameras, I set them up to ftp the footage from their internal storage to the share. I configured them to use the admin username and (non-standard) password. I enabled ftp access in the router GUI, however I did not set the password protection setting (I have now set that per your link).
So my share was exposed to anonymous access and I suspect a bot or whatever tested my IP, found the share to be open and dropped the trojan into every directory. There was nothing on the share other than security footage, so nothing worth stealing.
I can't remember whether the router GUI has password protection enabled by default, but if not, I think that should be the default so that anyone wanting to turn it off would have to purposely do so.
I shall observe the share over the coming days and check that no further nasties appear.
Many thanks.
8 Replies
Hi Retired_Member
Welcome to the community!The only security you can enable on the attached HD is setting folder permission.
There's no way that the router can detect a virus and where it comes from.
You may probably have to do this by enabling the access on the HD one by one on every individual in your network.
Retired_Member See the link provided from the previous post on how to enable folder permission.
