NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Ken6432-1
May 13, 2020Guide
RN104 Resync Speed on 3rd Drive Replacement Very Slow
I am updating my RN104 from 4 8Tb drives to 4 10Tb drives. After replacing the first drive, the resync took a couple of days to complete. After replacing the second drive, about the same length of ...
- May 15, 2020
I rebooted the NAS and the resync speed increased to about 14 Mb/sec. I don't know what was causing the slow down before.
I do have backup jobs running Rsync. This particular NAS does not have any backups configured on it, but it is the NAS that recieves backups from another NAS.
Ken6432-1
May 13, 2020Guide
StephenB wrote:
Ken6432-1 wrote:
md127 : active raid5 sdb3[6] sda3[7] sdd3[4] sdc3[5]
11706500352 blocks super 1.2 level 5, 64k chunk, algorithm 2 [4/3] [U_UU]
[================>....] recovery = 84.3% (3290015080/3902166784) finish=7 593.8min speed=1343K/secThis is extremely slow (1 to 2 MB/s). Did you look at the smart stats with smartctl (smartctl -x /dev/sda (repeat for the other disks).
I'm not sure what I am looking for. Nothing jumps out to me on /dev/sda, but that appears to be the 8Tb drive in the rightmost drive location. What would the address of the drive that is the third from the left? That is the one that was just changed.
Ken6432-1 wrote:
May 12 21:46:38 Media-Backup sshd[3419]: Invalid user Retford from 192.168.1.1This is a little scary. Do you have ports forwarded to the NAS in your router? OR perhaps put it in the router's DMZ? If you have, then you should disable the forwarding (or put the NAS out of the DMZ).
I have not set anything on my router that would have to do with any of my NAS's. In fact, I don't remember setting anything except the basic out-of-the-box settings. I agree it is concerning. I updated my passwords to be safe.
Ken6432-1
May 15, 2020Guide
I rebooted the NAS and the resync speed increased to about 14 Mb/sec. I don't know what was causing the slow down before.
I do have backup jobs running Rsync. This particular NAS does not have any backups configured on it, but it is the NAS that recieves backups from another NAS.
- StephenBMay 15, 2020Guru - Experienced User
Ken6432-1 wrote:
I do have backup jobs running Rsync. This particular NAS does not have any backups configured on it, but it is the NAS that recieves backups from another NAS.
Just rsync? Or rsync-over-ssh?
Is the other NAS on the local network? Or is it remote?
- Ken6432-1May 15, 2020Guide
My backups are Rsync Server mode. All NASs are on the local network, none are remote. I have SSH configured on as that is how I log in via PuTTY. That is how I was running the cat command.
I have rechecked my router and have no ports forwarding at all listed.
- StephenBMay 15, 2020Guru - Experienced User
Ken6432-1 wrote:
My backups are Rsync Server mode. All NASs are on the local network, none are remote. I have SSH configured on as that is how I log in via PuTTY. That is how I was running the cat command.
I have rechecked my router and have no ports forwarding at all listed.
Ok. So someone tried to use ssh to access the NAS, and that appeared to come from the router. Normally that means it was coming over the internet - which would require port forwarding.
If there are no router ports forwarded, and the NAS isn't listed in the router DMZ, then one other possibility is that uPNP is being used to open ports. So you could try turning uPNP off in your router. What router do you have? Is it's firmware up to date?
If the NAS is in fact compromised, you'd want to a factory default, and set it up fresh. That would require restoring the files from backup. I wouldn't try to save/restore configuration files, since that might propagate the problem.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!