I am running OS6.10.1 on my Ultra 6+ and struggle to find how to mount a share as a drive when I'm in my office (WAN side of NAS).
I have success with readyCLOUD but then files are only reached from a WEB GUI + I can sync folders.
Sync folders are not an option sinse the drive I need to see at work is like 2-4 Tbyte, much more than my HDD.
This drive will be used by up to 5 persons.
I have looked at iSCS, but I have understanding that iSCSI is not the best way, and also it can crash/destroy data it more than one user tries to open same file (wich happens sometimes when we colaborate)
I have a pfsense router and NAT/portforward is no problem to set up.
Anybody who can share the recepy?
Thanks up front!
I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.
Model: RNDP600U|ReadyNAS Ultra 6 Plus Chassis only
I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.
It's not the only option, but it's the only secure option for accessing shares with SMB. Several folks here who had SMB access enabled over the WAN (some accidentally) recently got hit with ransomware on their public shares.
One aspect is that SMB is all-or-nothing. You can't set up remote SMB access for some shares, but block it for others.
Some other things you could do:
Enable FTPS for some shares, and access with FileZilla or WinSCP. That is secure.
Set up WebDav for a share, and install a WebDav client. That runs over http, so you'd need to enable remote HTTP/S access for the NAS
Personally I'd go with the VPN (first choice) or FTPS (second choice). There's not much out there for WebDAV, and you'd end up enabling remote access to the admin web ui if you enable HTTPS.
I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.
It's not the only option, but it's the only secure option for accessing shares with SMB. Several folks here who had SMB access enabled over the WAN (some accidentally) recently got hit with ransomware on their public shares.
StephenB, you are Gold.
I will then dismiss SMB, and try VPN.
I have never done anything with VPN, so this will be a challange...
I see that Readynas offers HOB VPN, i installed it, and ther it came, a lot of configuration... help!
There's also ZeroTier - though at the moment you can't install that on a NAS running 6.10.x.
Personally I use OpenVPN (which is built into my Orbi router). That gives me full access to my home network when I'm away from home. See if your router supports it - it's the simplest way to go, and avoids the configuration headaches.
I've also tried out ZeroTier - but I ran it on a PC, not the NAS.
Personally I use OpenVPN (which is built into my Orbi router). That gives me full access to my home network when I'm away from home. See if your router supports it - it's the simplest way to go, and avoids the configuration headaches.
Hi, i have a dedicated PFsense box, so the router supports openVPN.
I dont understand how this can help me share a Share like i drive on WAN side. I need to find info about this, as i mentioned, i have no know how about VPN. Exept i use NordVPN as a service to watch TV/Netflix when i abroad...
My question is, how is this working together with the rest of my network, i have 4 CAMS on my fish pond I reach from WAN side, will this access become useless (open ports + strong paswords)?
I have now acces to shares via OpenVPN, and it seems to work like a main access to all shares.
OpenVPN connects the remote client PCs to your home network. So you do need to make sure you have appropriate security on your home network devices if you allow others to access your network in this way. Also you need to have some level of trust in the remote users.
To start with, you need at least one more local NAS account that you can give more limited access. If you have multiple remote users, you should create one account for each (putting them in new group). Using a new group will allow you the ability to revoke access for a specific user later by simply deleting their account on the NAS.
You control the access to shares using the Network Access tab in each of the share settings. Turn off "Everyone" access for all the shares. Give the admin and user groups access to all the shares, and give the new "work" group access only to the work share. Generally it works out better to leave the file access permissions alone (allowing everyone access for all shares). Network access is enough to block access to a share.
Testing the permissions from a single PC is a bit tricky, since Windows only allows you to use one set of credentials at a time. Entering "net use * /delete" before you test a new set of credentials should clear out any open sessions - letting you switch to a different set.
My problem is that I need to have only one share, due to my cloud backup supplier, i can bakup only one drive from a PC like m: (where share Modesty is populated). And my backup suplier dont have any NAS app or rsync options... they have only bye a singe drive.
My ONLY share is Modesty.
Under Modesty I have a dir called Work. \\Modesty\Work
For this Work dir I can not, in OS6 set any group/user policy (rigth click on dir Work).
Is this an option that is solvable in OS6, or du I need a dir on same level as Modesty ie. \\modesty and \\Work?
Under Modesty I have a dir called Work. \\Modesty\Work
Modesty is the NAS hostname - not a share. Work would be the (only) share. This is the normal syntax - it would be the same if you were hosting the share on the PC.
For this Work dir I can not, in OS6 set any group/user policy (rigth click on dir Work).
Well, you don't do it that way. As I said, you use the admin web ui. Click on the share settings wheel for work, and then look on the "network access" page.
Though first you'd need to create an account for the remote system to use.
Here is rigth click on Work directory (\\Modesty\Work)
As you can see,on my NAS there is no wheel on directories under Share. And this is the reason i don'n figure out how to configure shares access to a directory in a share. Is there other options to fix this (without make a new share?)
You appear to have selected "Browse", not "Shares" on the share page. There is no right-click involved. Select the share, click on the settings wheel for the share, and choose "settings".
Then you'll see a popup - select the "Network access" tab there.
If you want to restrict read access, you'll uncheck "Allow anonymous access", and also remove read/write access for "Everyone". You can then select access for the specific account or group you want to allow (perhaps read access is enough)?
A variant is to leave reset "Everyone" to "read" - which would let anyone on the home network or openvpn connection read the share. In that case, you could leave "allow anonymous" set if you want (trusting in your home network and openvpn security).
