QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Questions about SNMP, Power, System, Logs, disk, & RAID.
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

Model TS-453a

So much happened to get me here, It started with the NAS throwing the volume into a read-only state because 2 of the 4 HDDs had errors. I was hoping to scan the HDDs for bad blocks enough to get it up into a bit of a "limp mode" until new drives arrive, but somehow I have my NAS in the following state:

The admin password has been reset (I did not do that myself)

• If I boot up with no HDDs inserted, I can connect to the web interface. It shows the latest firmware (4.xxx from July 27th or thereabouts.) and, naturally, looks like it's a fresh new NAS and wants me to set it up.

• If I boot with the HDDs inserted, it shows a version of 1.0208.0101 in QFinder. I can SSH in, but the web interface refuses the connection.

I'm just baffled. halp!
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by dolbyman »

could be malware..was the nas exposed to wan?

viewtopic.php?f=73&t=162303
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

It should not have been exposed to the WAN, save for specific ports to some services, no. ¯\_(ツ)_/¯
User avatar
OneCD
Guru
Posts: 12010
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by OneCD »

jorn-k wrote: Tue Aug 03, 2021 3:31 am ... save for specific ports to some services ...
Then that's a "yes". ;)

Which services?

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

Plex was allowed in. VPN, as well.
Actually, here's a list TCP/UDP: 2234,2300-2400,6073,6667,28800-29100,47624,50000-50100
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by dolbyman »

that is alot of ports for just plex and vpn

also were they forwarded or redirected?

if ony of these ports redirected to 8080..then you are exposed
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

All are tagged as forwards
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

FYI the HD status lights on my NAS are as follows:
1: green
2: off
3: red
4: red
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by dolbyman »

well anyways...try malware remover and/or open a ticket with qnap support so they can investigate
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

Are you aware of a way to run the malware remover who I only have SSH access? Thanks :)
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

For what it's worth, when I run a

Code: Select all

cat /etc/config/qpkg.conf | grep \] 
I can see that MalwareRemover is running.
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by dolbyman »

check your cron to see what script is invoked when MR starts

also check cron and autostart.sh for malware (most of the time cryptic entries)
User avatar
OneCD
Guru
Posts: 12010
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by OneCD »

It also sounds like you may be running with UPnP enabled on the router. Please disable this service in the router and remove all ports forwarded to the NAS. Then reboot your router to ensure they’re closed.

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

dolbyman wrote: Tue Aug 03, 2021 4:37 am check your cron to see what script is invoked when MR starts
also check cron and autostart.sh for malware (most of the time cryptic entries)
Given the "nonstandardness" of Qnap's *nix, where might I locate these?
jorn-k
Starting out
Posts: 20
Joined: Sun Dec 04, 2016 8:15 pm

Re: QFinder shows ver 1.0208.0101 when discs are connected & web refuses to connect... more crazy issues

Post by jorn-k »

OneCD wrote: Tue Aug 03, 2021 4:40 am It also sounds like you may be running with UPnP enabled on the router. Please disable this service in the router and remove all ports forwarded to the NAS. Then reboot your router to ensure they’re closed.
Post Reply

Return to “System & Disk Volume Management”