NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
master64nl
Nov 03, 2011Aspirant
Downloading to your pc from a share
Dear members,
I have made a share for my family to download from. They can access over HTTPS the share and log in on the share. They can create on the share and change but not download anything. What do I do wrong?
I have made a share for my family to download from. They can access over HTTPS the share and log in on the share. They can create on the share and change but not download anything. What do I do wrong?
32 Replies
Replies have been turned off for this discussion
- master64nlAspirantHi Stephan, nice protocol but I have a few questions. I am not an IT man.
On the Duo, under "standard file protocols"
-check box for FTP is checked
-a non-standard port was chosen - xxxx does it matter wich portnumber?
-authentication mode is user
-upload resume is enabled
-passive ports are set to xxxx+1 to xxxx+5 Means just to portnumbers?
-masquerade as is set to the Duo host name. The name of your NAS, right?
Note my duo uses the user security model. What is that?
for each share on the Duo,
-ftp default access is set to read/write
-all other boxes left alone. What boxes?
On the router, TCP ports xxxx to xxxx+5 are forwarded to the Duo The 2 porst I put in the passive ports setting?
ddns is active, so I can use a uri to reach the router. uri means Uri Keller :)
In FileZilla's site manager This is the next step. First the NAS settings. But ma-be you can explain some other lines beneath here.
(general tab)
-host is to the ddns uri
-port is set to xxxx
-protocol is set to ftp
-encryption is set to require explicit FTP over TLS
-Logon type is normal
-user password set to my NAS credentials
(transfer settings tab)
-transfer mode is default.
This works for on my home network and over the internet (FileZilla automatically handles the masquerade issue).
Note that it would also connect if encryption were set to off, however, I don't do that. - StephenBGuru - Experienced User
Some port numbers are assigned particular functions by the internet folks. So it is generally best to use numbers between 49160 and 65534 (as these are not assigned)-a non-standard port was chosen - xxxx does it matter wich portnumber?
Yes-passive ports are set to xxxx+1 to xxxx+5 Means just to portnumbers?
Yes-masquerade as is set to the Duo host name. The name of your NAS, right?
In the past the duo also had a "share" security model - this was taken out a while ago, so if you have current firmware you don't need to worry about it.Note my duo uses the user security model. What is that?
All the share access restriction configuration settings and advanced FTP permission settings can be left as is.for each share on the Duo,
-ftp default access is set to read/write
-all other boxes left alone. What boxes?
URI is "Uniform Resource Identifier" - a techy way of saying ftp://blah.blah.blah (for instance http://www.cnn.com is a URI)On the router, TCP ports xxxx to xxxx+5 are forwarded to the Duo The 2 porst I put in the passive ports setting?
ddns is active, so I can use a uri to reach the router. uri means Uri Keller :) - master64nlAspirant
StephenB wrote:
Some port numbers are assigned particular functions by the internet folks. So it is generally best to use numbers between 49160 and 65534 (as these are not assigned)-a non-standard port was chosen - xxxx does it matter wich portnumber?
Yes-passive ports are set to xxxx+1 to xxxx+5 Means just to portnumbers?
Yes-masquerade as is set to the Duo host name. The name of your NAS, right?
In the past the duo also had a "share" security model - this was taken out a while ago, so if you have current firmware you don't need to worry about it.Note my duo uses the user security model. What is that?
All the share access restriction configuration settings and advanced FTP permission settings can be left as is.for each share on the Duo,
-ftp default access is set to read/write
-all other boxes left alone. What boxes?
URI is "Uniform Resource Identifier" - a techy way of saying ftp://blah.blah.blah (for instance http://www.cnn.com is a URI)On the router, TCP ports xxxx to xxxx+5 are forwarded to the Duo The 2 porst I put in the passive ports setting?
ddns is active, so I can use a uri to reach the router. uri means Uri Keller :)
So I can choose for example port 50001 and passive ports 50000 - 60000?
In the router external and internal port begin 50000 and external and internal port end 60000? And server IP address my NAS? And server-name the IP address of the one I want to contact me? - StephenBGuru - Experienced User
It would be better to make sure the passive ports don't include the main port. So you would want passive ports 50002 - 60000. Though about 10000 ports for ftp is a lot more than you need. I'd suggest 50002-50005 (4 passive ports total). So in your example, perhapsmaster64nl wrote: So I can choose for example port 50001 and passive ports 50000 - 60000?
50000: https to the readynas
50001: ftp main port to the readynas
50002-5: ftp passive ports to the readynas
In the router, set things up to that the full port range you want to use for the ReadyNas are forwarded to the ReadyNas. I think that is what you are saying...master64nl wrote: So I can choose for example port 50001 and passive ports 50000 - 60000?
In the router external and internal port begin 50000 and external and internal port end 60000? And server IP address my NAS? And server-name the IP address of the one I want to contact me?
Most routers support ddns, so you can set that up in the router itself (with one ddns name that always reaches the router). The router uses the incoming port to forward the request to the ReadyNAS. What router are you using? - master64nlAspirant
I have an Tele2 modem/router. You mean DynDNS account with ddns?StephenB wrote:
It would be better to make sure the passive ports don't include the main port. So you would want passive ports 50002 - 60000. Though about 10000 ports for ftp is a lot more than you need. I'd suggest 50002-50005 (4 passive ports total). So in your example, perhapsmaster64nl wrote: So I can choose for example port 50001 and passive ports 50000 - 60000?
50000: https to the readynas
50001: ftp main port to the readynas
50002-5: ftp passive ports to the readynas
aaah that`s make it more clear now.
In the router, set things up to that the full port range you want to use for the ReadyNas are forwarded to the ReadyNas. I think that is what you are saying... Same as the set up for HTTPS.master64nl wrote: So I can choose for example port 50001 and passive ports 50000 - 60000?
In the router external and internal port begin 50000 and external and internal port end 60000? And server IP address my NAS? And server-name the IP address of the one I want to contact me?
Most routers support ddns, so you can set that up in the router itself (with one ddns name that always reaches the router). The router uses the incoming port to forward the request to the ReadyNAS. What router are you using? - StephenBGuru - Experienced User
Yes, you need to have an account with some ddns provider (dynDNS being one). Once you have that, you need to bind your current external IP address to the ddns name. You can do that either by installing a dyndns app on one of your PCs or by configuring the account information into your router. Not sure if your router supports this (I'm not finding much English documentation for Tele2).master64nl wrote: ... You mean DynDNS account with ddns? - master64nlAspirantI can not set up DynDNS settings in my tele2 modem/router. I have an DynDNS account but I am using that for something else. So how to set up my external ip to my internal NAS address and don`t have issues with my other setting?
- StephenBGuru - Experienced User
master64nl wrote: I can not set up DynDNS settings in my tele2 modem/router. I have an DynDNS account but I am using that for something else. So how to set up my external ip to my internal NAS address and don`t have issues with my other setting?
First of all, if DynDNS is also being used to connect to your tele2 router, than you can just use the DynDNS name with your NAS as well. (the purpose of the ddns is to reach your router by name; getting from the router to the NAS or a PC is done by the port forwarding in the router).
Assuming you are using DynDNS for some other network, you can
(1) Ask for a static IP address from your ISP, and then just use the IP address. This generally is not free.
(2) Get a free no-ip ddns account. Download their Dynamic DNS Update Client and install it on your PC.
The disadvantage of the PC update client is that it can only resync your external IP address when the PC is on. So if you want to access the NAS when you are away from home, you might need to keep the PC turned on. - master64nlAspirant
StephenB wrote: master64nl wrote: I can not set up DynDNS settings in my tele2 modem/router. I have an DynDNS account but I am using that for something else. So how to set up my external ip to my internal NAS address and don`t have issues with my other setting?
First of all, if DynDNS is also being used to connect to your tele2 router, than you can just use the DynDNS name with your NAS as well. (the purpose of the ddns is to reach your router by name; getting from the router to the NAS or a PC is done by the port forwarding in the router). That`s right, but does it not bite the other thing I used the DynDNS name for?
Assuming you are using DynDNS for some other network, you can You are saying that I make the NAS an server via DynDNS?
(1) Ask for a static IP address from your ISP, and then just use the IP address. This generally is not free. It is.
(2) Get a free no-ip ddns account. Download their Dynamic DNS Update Client and install it on your PC. I have a paid one.
The disadvantage of the PC update client is that it can only resync your external IP address when the PC is on. So if you want to access the NAS when you are away from home, you might need to keep the PC turned on.
I have only to log in my DynDNS account once a month to keep it synchronise.
Wich port number must I forward excactly. - StephenBGuru - Experienced User
I would suggest forwarding 50000 to 50005 to the ReadyNas in the router, and set them up on the readynas as follows:master64nl wrote: StephenB wrote: master64nl wrote: I can not set up DynDNS settings in my tele2 modem/router. I have an DynDNS account but I am using that for something else. So how to set up my external ip to my internal NAS address and don`t have issues with my other setting?
First of all, if DynDNS is also being used to connect to your tele2 router, than you can just use the DynDNS name with your NAS as well. (the purpose of the ddns is to reach your router by name; getting from the router to the NAS or a PC is done by the port forwarding in the router). That`s right, but does it not bite the other thing I used the DynDNS name for?
Assuming you are using DynDNS for some other network, you can You are saying that I make the NAS an server via DynDNS?
(1) Ask for a static IP address from your ISP, and then just use the IP address. This generally is not free. It is.
(2) Get a free no-ip ddns account. Download their Dynamic DNS Update Client and install it on your PC. I have a paid one.
The disadvantage of the PC update client is that it can only resync your external IP address when the PC is on. So if you want to access the NAS when you are away from home, you might need to keep the PC turned on.
I have only to log in my DynDNS account once a month to keep it synchronise.
Wich port number must I forward excactly.
50000: https
50001: ftp main port
50002-5: ftp passive ports
You can pick other port numbers if you like.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!