Can someone please explain to me, a casual home user, why it's dangerous to expose my NAS login page to the internet?... - eviltoast

…without snark or jumping down my throat. I genuinely want to know why it’s so unsafe.

I’m running a Synology DS920+, with my DSM login exposed through a Cloudflare tunnel. I have 2FA enabled, Synology firewall enabled with these rules in place. I also have this IP blocklist enabled.

After all of this, how would someone be able to break in via the DSM login?

  • horus-heresy@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Did you Google or ask chat gpt about risks of letting bad actors brute force or potentially use some zero day with some crazy url that can let them encrypt all your family pictures and other data? If you want to access from outside do that thru some reverse proxy like find proxy manager or traefik

    • OneBreakfastPlease@alien.topOPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Did you Google or ask chat gpt

      No, I didn’t, because I wanted to start up a conversation with real humans who are in the same situation as me… Or, you know, the entire purpose of Reddit.

      • horus-heresy@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        why sky is blue? why water wet? Some things are better to research yourself before just asking questions