myQNAPcloud Unavailable, then available, then unavailable

[Ja55ie]

Hi,

I have set up a new QNAP TS-253B recently and I keep getting email update notification saying:

"Message: [myQNAPcloud] myQNAPcloud Link service for myQNAPcloud website is unavailable. You cannot manage or share the file(s)/folder(s) stored on this QNAP device via myQNAPcloud web site. Error code: -1."

and then another notification saying:

"myQNAPcloud Link service for myQNAPcloud website is ready."

And then these two notifications repeat. I keep getting these two emails saying that the service is unavailable and then saying that it is ready. I received over 22 emails just overnight. I am wondering how to resolve this issue.

Thanks,

[spikemixture]

I started a similar post just now .

Might be the same issue. I am also contacting support

[Moogle Stiltzkin]

...

just wondering, but how do you setup your qnapcloud?

are you using a reverse proxy? or are you using vpn? just curious

[spikemixture]

...

just wondering, but how do you setup your qnapcloud?

are you using a reverse proxy? or are you using vpn? just curious

Neither

I goto Network & Virtual Switch /
(advanced) Access Services - DDNS
Then add myqnapoclound and noip

[Moogle Stiltzkin]

Neither

I goto Network & Virtual Switch /
(advanced) Access Services - DDNS
Then add myqnapoclound and noip

oic, thx. so just for the ddns.

did you try out cloudflare for ddns? it can do reverse proxy? has some extra protection. @4:14
https://www.youtube.com/watch?v=NV2eKYmQF6Q

When you first start out, security probably isn’t your first concern. But as your site grows, it becomes increasingly important to ensure your site is protected from any malware and malicious bot.

Luckily, CDNs come to the rescue here as well.

Because CDNs like Cloudflare serve such a large percentage of websites through their distributed networks, they have learned a thing or two. They have built up a massive (and ever growing) list of malicious domains, IP addresses, and other identifiers that indicate a threat to your website.

So if a bot or hacker tries to get into your site, the CDN can step in as a first line of defense and prevent the bad guy from ever getting to your actual server. Pretty neat!

https://incomemesh.com/cloudflare-tutorial/


you have to use containerized apps as well though for more added protection.
https://blog.linuxserver.io/2017/09/17/ ... s-on-qnap/
https://www.trendmicro.com/en_au/what-i ... ocker.html

I now have mine running the docker as well. I feel a lot better about it now.

1) Plex is running protected from the system inside a docker with read-only access to my file system
2) No risk of damage if I get hacked through Plex. FACT: Plex forum has an open thread more than 5 years old now asking for basic two-factor authentication for login. It absolutely blows my mind that it's 2020 and Plex hasn't enabled this very basic security feature!!
3) Plex is running as a user inside my container and not as admin on my regular filesystem

docker pull linuxserver/plex

docker run --restart unless-stopped -d \
--name="plex" \
--restart always \
--net=host \
-e TZ="America/Chicago" \
-e PLEX_CLAIM="claim-QtZ5saMRTPrpuy" \
-e VERSION=public \
-e PUID=1010 -e PGID=100 \
-v /share/docker/appdata/linuxserver-plex/config:/config:rw \
-v /share/docker/appdata/linuxserver-plex/transcode:/transcode:rw \
-v /share/Movies/Movies:/share/Movies/Movies:ro \
linuxserver/plex

To move the QPKG over to the docker, I moved only these folders:

drwxrwxrwx 4 plex everyone 4096 2020-05-07 17:41 Codecs/
drwxrwxrwx 3 plex everyone 4096 2020-05-14 01:50 Logs/
drwxrwxrwx 3 plex everyone 4096 2018-05-10 21:01 Media/
drwxrwxrwx 6 plex everyone 4096 2018-11-25 22:19 Metadata/
drwxrwxrwx 20 plex everyone 4096 2018-12-15 17:23 Plug-ins/
drwxrwxrwx 7 plex everyone 4096 2018-05-10 20:59 Plug-in Support/
-rw-rw-rw- 1 plex everyone 1670 2020-05-14 01:42 Preferences.xml

Copy command:

[/share/docker/appdata/linuxserver-plex/config/Library/Application Support/Plex Media Server] # cp -av /share/CACHEDEV1_DATA/.qpkg/PlexMediaServer/Library/Plex\ Media\ Server/[put all the dirs above here] .

Folders not needed (or optional)

drwxrwxrwx 5 plex everyone 4096 2020-05-14 01:52 Cache/
drwxrwxrwx 3 plex everyone 4096 2020-05-14 00:44 Crash Reports/

viewtopic.php?f=354&t=125041&start=45#p752261


i'm assuming you are using it for something like remote plex?

then again....

edifus

Cloudflare will suspend your domain if you push Plex through their network.. just be warned..

Hello,

Please be aware Cloudflare is a network provider offering a reverse proxy, pass-through security service. We are not a hosting provider nor do we allow our services to store files, or be linked to file storage sites. Using Cloudflare’s services primarily as an online storage space, including the storage or caching of a disproportionate percentage of images, movies, audio files or other non-HTML content is prohibited.

As such, we have routed your domain off of Cloudflare’s platform for violations of our Terms of Service(ToS). If you believe this to be in error and wish to refute this, please reply to this email and provide us with explicit and specific reason(s) as to why Cloudflare should reinstate your account so that we may review. Please know that Cloudflare has sole discretion on reinstatement of any accounts found to be in violation of our ToS.

https://www.reddit.com/r/PleX/comments/ ... ing_up_as/


But this was exactly the config someone else was using the cloudflare ddns for ....
https://blog.awelswynol.co.uk/2018/01/s ... -with-emby

NomadCF

Basicly Zero, you need to turn off most of cloudfares optimization fractures. Otherwise remote emby user will experience issues. And since you've purposefully added another hop. You've actually increase your latency.

https://www.reddit.com/r/emby/comments/ ... t_kind_of/

https://forums.unraid.net/topic/80745-s ... ent=770073


setting up docker containers (for plex or other app you have to search for that. but the concept is similar essentially)
https://emby.media/community/index.php? ... ntry885016
https://emby.media/community/index.php? ... r-station/
https://emby.media/community/index.php? ... +%2Bdocker

[PIRATA!]

Hello,

First of all I'd like to know if someone here has resolved the continuous notification "Message: [myQNAPcloud] myQNAPcloud Link service for myQNAPcloud website is ready." showing up.
I have email notifications running, and I see this message getting to my inbox every few hours, and when it starts I get about between 10 and 20 emails with the same notification with a distance of something near 2 minuets one from another.


Regarding containers, I use Plex for local lan streaming of downloaded movies in my house, from my Nas to the TVs I have in some rooms.
Is it still the case of using containers??

I also have my Nas connected to the internet for fine accessing when I need something for work (I usually connect using Qfile). If it strictly advised to use containers as well?

For security I have followed any standard indication Qnap says to take, like not using the "admin" user, don't have Upnp enabled, and have 2-form-factor on myqnapcloud.

Thank you for your advise.





Sent from my SM-G970F using Tapatalk

[dolbyman]

Cant say anything to cloudlink notifications, as I do not use it (a ticket with QNAP would be a good idea here)

Not sure what the container question is about, can you rephrase that?

2FA, changed user accounts and strong passwords do nothing when malware uses exploits to attack your NAS, so make sure you never directly expose your NAS to WAN

[PIRATA!]

Cant say anything to cloudlink notifications, as I do not use it (a ticket with QNAP would be a good idea here)

Not sure what the container question is about, can you rephrase that?

2FA, changed user accounts and strong passwords do nothing when malware uses exploits to attack your NAS, so make sure you never directly expose your NAS to WAN

Thank you.
I will investigate better why I should get that message so often in these last days and open a ticket.

Regarding the container question, the post up here mention "containerized apps" and "Plex".
I have simply Plex installed on my Nas ava use it only locally.

Regaining my Nas, it is connected to the internet constantly.
I can access it using my phone anytime.

I have it set following all the guidelines I have read across various security emails from Qnap, but can't disconnect from the internet, as I often need to access my files for work across my travels.



Sent from my SM-G970F using Tapatalk

[dolbyman]

Not sure if cloudlink works via phoneapps or if you are actually exposing your NAS (check that) .. if you expose your NAS, be prepared to lose all your files in the current or future malware campaigns (even qnap says in current bulletins NOT to expose your NAS)

still dont understand your Plex question ..you can run Plex native or containerized..but what is your question?

[PIRATA!]

Not sure if cloudlink works via phoneapps or if you are actually exposing your NAS (check that) .. if you expose your NAS, be prepared to lose all your files in the current or future malware campaigns (even qnap says in current bulletins NOT to expose your NAS)

still dont understand your Plex question ..you can run Plex native or containerized..but what is your question?

Sorry for the late reply.

How to check if my Nas is exposed? To connect at it from my phone of laptop across the internet I have to enter a series of passwords + Google Authenticator.

Regarding Plex, I don't understand what is the difference between running Plex native or containerized, as I have no idea what containerized means here.

Can you explain? Actually my Plex is running on the Nas and I can only access at the Plex app (and at my library) only from TVs that are connected to my local lan. No external internet access.

Thank you.

[dolbyman]

Passwords and 2FA etc do not help as exploits just bypass them (QNAP has horrible security)

So unless you access your NAS via VPN or you use a relay service like QNAP cloud link, your NAS will be exposed. (check your router if upnp is disabled or manual port forwarding is active and setup)

Native Plex = Plex as qpkg
Containerized Plex = Plex inside Container Station

[R0GGER]

Passwords and 2FA etc do not help as exploits just bypass them (QNAP has horrible security)
So unless you access your NAS via VPN or you use a relay service like QNAP cloud link, your NAS will be exposed. (check your router if upnp is disabled or manual port forwarding is active and setup)

Funny! Haha... A few years ago UPnP was perfectly fine (your words, not mine). I told you!
Read - UPnP = unsafe!: viewtopic.php?f=73&t=133562&p=621411#p621459

[dolbyman]

The quoted post says nothing about upnp beeing safe.. a post earlier I agreed that it should be disabled ...not quite sure where the big "gotcha" is supposed to be ...I am waiting

You can manually port forward to expose your NAS and get hacked the same way...even with upnp disabled..