The final setting you should enable is “Deny Access” for “If no rules are matched” which makes my first rule redundant. a third rule is to allow every port open to my internal network.

a second rule to permit only certain ports to US IP addresses (all other ports are also blocked).

one rule to block several countries (this is redundant, you’ll see below).

Setting up firewall rules are quick and easy – in DSM 5.0 go to Control Panel > Security > and select the Firewall tab. With your Synology accessible to the internet this is, in nearly every single case, a very bad idea.

A $9.00 /year SSL cert from NameCheap is all you need.īe sure to read: Secure your Synology NAS, install a SSL certificateīy default the Synology firewall is setup to allow everyone and their brother access. If your Synology NAS is going to be accessible via the internet, then you should also install a valid SSL certificate and stop using the default self-signed cert that can be forged. The Synology has a plethora of wonder features and many of those features become even better (or only possible) with the Synology NAS accessible on the internet. The best way to prevent an attacker from the outside from reaching your NAS is to not even make it available online. Update your stuff man! I know in DSM 5.0 you can actually make the NAS look for updates and notify you when there are updates available. That’s NOT counting the newer DSM 5.0 builds and updates. So far, in both the dogecoin malware and Synolocker ransonware attacks it seems attackers were able to use known exploits in the DSM 4.3-3810 builds – a build that’s nearly 9 months old and has seen 6 updates to the DSM 4.3 builds alone.

Securing and Protecting your Synology NASįirst and foremost would be to keep your Synology updated. Below I’m going to list several ways to help protect your NAS, I’ll be using my Synology DS412+ for demo. That was before the Dogecoin malware were found infecting Synology NAS boxes early this summer or now the “SynoLocker” ransomware that encrypts all the data on your NAS and forces you to pay $350 to decrypt the data. Earlier this year I posted instructions on how to install an SSL certificate on your Synology NAS.

Crashplan smb