ReadyNAS RN424 security message?

[KirkPete]

What do I do regarding this message?

It seems that your data/ folder is not protected, and that subfolders (like the data/cache/ folder) are web-accessible. If you are using Apache, make sure the AllowOverride All option is active for your current directory. If you are running Windows IIS, you must manually add a RequestFiltering/HiddenSegments configuration to prevent web access to these folders. If you have defined a different AJXP_DATA_PATH pointing outside the webfolder, you can ignore this warning.

I am not sure how to fix this.

thx!

[StephenB]

Where you are seeing this message?

[KirkPete]

I installed one of the file explorer apps. (pydio)

[StephenB]

So the message is coming from pydio?

If you have defined a different AJXP_DATA_PATH pointing outside the webfolder, you can ignore this warning.

This might be your situation - but perhaps someone who uses pydio can confirm.

[KirkPete]

I installed the Pydio app to "kick the tires"...I don't have it installed any more.

I have not intentionally changed any configs, as you note.  How would I check out my config to see what everything is set too?

thanks!

[StephenB]

FIrst of all, I am not convinced there is anything you need to fix.

Examining the web server configuration is complex - you'd need to use ssh, and the configuration files are distributed.  Changing those files could easily make it impossible to access the admin web ui.