Hi all,
I use an old TS112 updated to the latest firmware. In general, I access via WEBDAV and only the relative XXXX port is open towards the WAN (NOT443). Through mobile I use QFILE but I can't enable SSL if I use MYQNAPCLOUD LINK. It's normal? I use the let's encrypt certificate only to use it on the https website. Only ports 80 and 443 are exposed but NOT the management port and are translated to other ports (80>8x, 443>4yy). Thank you
QFILE and SSL connection
-
- Know my way around
- Posts: 104
- Joined: Fri Apr 15, 2022 4:27 pm
Re: QFILE and SSL connection
Very risky setup! I would stop it and set up a VPN like WireGuard on your router.
-
- New here
- Posts: 5
- Joined: Sat Apr 12, 2014 3:49 pm
Re: QFILE and SSL connection
Hello, thanks for the reply but I would like some clarification: in my case the vpn is NOT the solution as I believe it is not in many cases. Why a system not exposed and protected by 2FA both with QNAP ID and LOGIN after mynapcloud login is not safe? Vulnerability of QNAP NAS is on login when exposed: or not? Thank you...
-
- Know my way around
- Posts: 104
- Joined: Fri Apr 15, 2022 4:27 pm
Re: QFILE and SSL connection
NEVER expose a NAS to the internet, ALWAYS use a VPN!
- dolbyman
- Guru
- Posts: 35033
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: QFILE and SSL connection
2FA on QNAP does not protect you against exploits ..it's just skipped (people with 2FA still got deadbolt ransomwared)
-
- New here
- Posts: 5
- Joined: Sat Apr 12, 2014 3:49 pm
Re: QFILE and SSL connection
Thanks for the reply. So QNAP's recommended connection via myqnapcloud link is still not secure?
- dolbyman
- Guru
- Posts: 35033
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: QFILE and SSL connection
cloudlink is a relay and does not need open or forwarded ports (but all data flows thorigh qnap servers)
-
- New here
- Posts: 5
- Joined: Sat Apr 12, 2014 3:49 pm
Re: QFILE and SSL connection
Ok. Now, why in qfile connection with qnap server (myqnap link) after ID request no accept SSL protocol?
- dolbyman
- Guru
- Posts: 35033
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: QFILE and SSL connection
with cloudlink, SSL is handled by QNAP, as the connection is going via their servers...I have never used it, so no idea
-
- New here
- Posts: 5
- Joined: Sat Apr 12, 2014 3:49 pm
Re: QFILE and SSL connection
@dolbyman, thanks. Now relaxing!!!