biriani wrote:
A question, in case of a malicuos user that wants to enter to the content of the NAS.
schumaku wrote:
He will have just to reset the NAS phisically and than he could just enter the user name admin with password admin ?
Of course. Or dismount the HDD and re-assemble the disk mounts...
Rule #1 in IT security? Prohibit non-authorized physical access to your system.
This would also be a case for creating and using an encrypted volume. Just make sure you do NOT store the key on the NAS (don't use the default key option, and don't use the auto-load option).
The downside, each time you reboot you'll need to manually login to the NAS and enter the passphrase to enable the encrypted volume.
The plus, if someone were to physically unplug the NAS and take it somewhere and power it up, they would not be able to access any data unless they could unlock/mount the encrypted volume (they would need to guess the passphrase). And if you use a semi-complex password (10 digits with letters, numbers, and symbols), it is unlikely that anyone would ever be able to crack that passkey

This does hurt performance quite a bit, but it's a decent mitigation.
As schumaku said, if you are afraid of physical access, you should physically protect the NAS accordingly. But the encryption option (if used as I noted above) can be a great protection mechanism for this as well. Just do NOT forget your passphrase or you'll lose access to your own data

---