Unable to reach NAS via local IP address but able to reach it via public IP address

[hk@hsyn.de]

I have a similar problem.

My experience so far. I bought a QNAP TS-673A and installed it. Than i had some problems with the network and did a reset.
Than i installed it again. And now i am facing a quite similar problem. After installing the QNAP Proxy my nas isn't reachable from local ip anymore. But from the public IP. I won't do a reset again. I assume something went wrong when installing additional QNAP software. Maybe something in the Network & Virtual Switch config went wrong.

I tried to ping the nas and it responds to the public IP but not the local IP.
Any suggestions what could be the reason.

[dolbyman]

Split from necroposted topic here

viewtopic.php?f=50&t=156874

Please explain exactly what you installed and what your setup is

If you installed this
https://www.qnap.com/solution/proxy-server/en/
This should not cause your NAS to be accessible online (make sure you disable WAN access via port forwarding ASAP)

[hk@hsyn.de]

My HW setup is

• router with DHCP IPv4 & v6,
• nas latest FW and APPS
• a few laptops

NAS:

• Domain Controller
• Firewall
• WebServer
• WebDAV
• ssh
• Service Discovery
• FTP
• DLNA

These are the apps installed so far:

Code: Select all

Information	2023-02-06	02:36:05	admin	217.238.236.206	Web Desktop	App Center	App Installation	[App Center] Installed Q'center 1.12.4001 in "/share/ZFS530_DATA/.qpkg/Qcenter".
Information	2023-02-06	13:11:09	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed QuObjects 2.4.1446 in "/share/ZFS530_DATA/.qpkg/OSS".
Information	2023-02-06	13:09:18	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Qsirch 5.2.5 in "/share/ZFS530_DATA/.qpkg/Qsirch".
Information	2023-02-06	13:07:43	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Text Editor 1.1.4 in "/share/ZFS530_DATA/.qpkg/TextEditor".
Information	2023-02-06	13:07:29	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Qboost 1.4.3 in "/share/ZFS2_DATA/.qpkg/Qboost".
Information	2023-02-06	13:06:50	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Proxy Server 1.4.3 in "/share/ZFS530_DATA/.qpkg/ProxyServer".
Information	2023-02-06	13:06:47	System	127.0.0.1	---	---	---	[App Center] ProxyServer 1.4.3 has been installed in /share/ZFS530_DATA/.qpkg/ProxyServer successfully.
Information	2023-02-06	13:01:49	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Hyper Data Protector 1.4.2.1201 in "/share/ZFS530_DATA/.qpkg/HyperDataProtector".
Information	2023-02-06	12:56:45	admin	62.227.213.185	Web Desktop	App Center	App Installation	[App Center] Installed Cinema28 1.2.5 in "/share/ZFS530_DATA/.qpkg/Cinema28".
Information	2023-02-06	02:42:32	admin	127.0.0.1	---	App Center	App Installation	[App Center] Installed Q'center Agent 1.12.4001 in "/share/ZFS530_DATA/.qpkg/Qcenter-Agent".
Information	2023-02-05	22:40:03	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QuMagie 1.9.1 in "/share/ZFS530_DATA/.qpkg/qumagie/v1.9.1".
Information	2023-02-05	22:23:01	System	127.0.0.1	---	App Center	App Installation	[App Center] Virtualization Station 3.6.39 has been installed in /share/ZFS530_DATA/.qpkg/QKVM.
Information	2023-02-05	03:03:11	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Boxafe 1.5.475 in "/share/ZFS530_DATA/.qpkg/boxafe".
Information	2023-02-05	03:02:21	admin	192.168.199.31	Web Desktop	App Center	App Installation	[[App Center]] Installed VJBOD Cloud 1.3.1962 in "/share/ZFS530_DATA/.qpkg/VJBOD_Cloud_Plug-in".
Information	2023-02-05	03:01:21	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Hybrid Backup Sync 21.1.1227 in "/share/ZFS530_DATA/.qpkg/HybridBackup".
Information	2023-02-05	03:00:27	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QmailAgent 3.3.0 in "/share/ZFS530_DATA/.qpkg/qmail".
Information	2023-02-05	02:58:33	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QcalAgent 1.1.7 in "/share/ZFS530_DATA/.qpkg/qcalendar".
Information	2023-02-05	02:57:59	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed MariaDB 10 1.0.4.32 in "/share/ZFS2_DATA/.qpkg/MariaDB10".
Information	2023-02-04	01:59:23	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Qsync Central 4.4.0.9 in "/share/ZFS530_DATA/.qpkg/QsyncServer".
Information	2023-02-03	23:01:37	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QuFTP Service 1.2.1 in "/share/ZFS530_DATA/.qpkg/QuFTP".
Information	2023-02-02	16:02:41	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed MARS (Multi-Application Recovery Service) 1.1.1.1343 in "/share/ZFS530_DATA/.qpkg/appbackup".
Information	2023-02-01	20:36:42	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Cinema28 1.2.4 in "/share/ZFS530_DATA/.qpkg/Cinema28".
Information	2023-02-01	20:22:18	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QNAP AI Core 3.2.1 in "/share/ZFS530_DATA/.qpkg/QuMagieCore".
Information	2023-02-01	20:16:20	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Image2PDF 2.1.6 in "/share/ZFS530_DATA/.qpkg/img2pdf".
Information	2023-02-01	20:07:47	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed CAYIN MediaSign Player 2.6.22328 in "/share/ZFS530_DATA/.qpkg/MediaSignPlayer".
Information	2023-02-01	19:25:41	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed MusicStation 5.3.20 in "/share/ZFS530_DATA/.qpkg/MusicStation".
Information	2023-02-01	19:25:27	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Video Station 5.5.10 in "/share/ZFS530_DATA/.qpkg/VideoStationPro".
Information	2023-02-01	00:19:09	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Plex Media Server 1.28.0 in "/share/ZFS530_DATA/.qpkg/PlexMediaServer".
Information	2023-01-24	13:19:47	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Qfiling 3.8.2 in "/share/ZFS530_DATA/.qpkg/Qfiling".
Information	2023-01-24	12:53:47	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed HybridMount 1.9.3761 in "/share/ZFS530_DATA/.qpkg/CacheMount".
Information	2023-01-24	12:53:01	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Container Station 2.6.3.592 in "/share/ZFS530_DATA/.qpkg/container-station".
Information	2023-01-24	12:51:45	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Download Station 5.8.3.251 in "/share/ZFS530_DATA/.qpkg/DownloadStation".
Information	2023-01-08	07:00:27	---	---	localhost	App Center	App Installation	[App Center] Installed Malware Remover 5.6.1.9 in "/share/ZFS530_DATA/.qpkg/MalwareRemover".
Information	2023-01-01	02:55:56	admin	192.168.199.22	Qmanager	App Center	App Installation	[App Center] Installed LicenseCenter 1.7.26 in "/mnt/ext/opt/LicenseCenter".
Information	2022-12-27	12:13:16	---	---	localhost	App Center	App Installation	[App Center] Installed Resource Monitor 1.2.0 in "/mnt/ext/opt/ResourceMonitor".
Information	2022-12-27	12:07:42	---	---	localhost	App Center	App Installation	[App Center] Installed QcloudSSLCertificate 2.2.32 in "/mnt/ext/opt/QcloudSSLCertificate".
Information	2022-12-27	12:07:13	---	---	localhost	App Center	App Installation	[App Center] Installed Notification Center 1.5.0.2121 in "/mnt/ext/opt/NotificationCenter".
Information	2022-12-27	12:05:11	---	---	localhost	---	---	[App Center] QuLog Center 1.5.0.730 has been installed in /mnt/ext/opt/QuLog successfully.
Information	2022-12-26	21:45:56	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed QuFirewall 2.3.2 in "/share/ZFS530_DATA/.qpkg/qufirewall".
Information	2022-12-24	21:38:52	---	---	Web Desktop	App Center	App Installation	[App Center] Installed Media Streaming Add-on 500.0.0.7 in "/share/ZFS530_DATA/.qpkg/QDMS".
Information	2022-12-24	21:37:37	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Multimedia Console 2.0.3 in "/share/ZFS530_DATA/.qpkg/MultimediaConsole".
Information	2022-12-24	18:40:48	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed Security Counselor 2.4.3.7 in "/share/ZFS530_DATA/.qpkg/SecurityCounselor".
Information	2022-12-24	15:51:41	admin	192.168.199.31	Web Desktop	myQNAPcloud	QTS SSL Certificate	[myQNAPcloud] Downloaded and installed the certificate.
Information	2022-12-24	15:41:42	admin	192.168.199.31	Web Desktop	App Center	App Installation	[App Center] Installed myQNAPcloud Link 2.4.36 in "/share/ZFS530_DATA/.qpkg/CloudLink".
Information	2022-12-24	15:41:21	---	---	Web Desktop	App Center	App Installation	[App Center] Installed Malware Remover 5.6.1.8 in "/share/ZFS530_DATA/.qpkg/MalwareRemover".
Information	2022-12-24	11:26:50	---	---	localhost	App Center	App Installation	[App Center] Installed Helpdesk 3.1.1 in "/mnt/HDA_ROOT/update_pkg/helpdesk".
Information	2022-12-24	11:26:37	---	---	localhost	App Center	App Installation	[App Center] Installed Resource Monitor 1.2.0 in "/mnt/ext/opt/ResourceMonitor".
Information	2022-12-24	11:26:14	---	---	localhost	App Center	App Installation	[App Center] Installed QcloudSSLCertificate 2.2.32 in "/mnt/ext/opt/QcloudSSLCertificate".
Information	2022-12-24	11:25:54	---	---	localhost	App Center	App Installation	[App Center] Installed QuLog Center 1.5.0.730 in "/mnt/ext/opt/QuLog".
Information	2022-12-24	11:25:23	---	---	localhost	App Center	App Installation	[App Center] Installed Notification Center 1.5.0.2121 in "/mnt/ext/opt/NotificationCenter".

[dolbyman]

So we are talking about this then

https://www.qnap.com/en/app_releasenote ... roxyServer

So this is supposed to be a traffic saver web proxie...so why is your NAS reachable from WAN?

[hk@hsyn.de]

It is accessible over myqnapcloud link.
The public ip is also not working.

[dolbyman]

ok..cloudlink is a relay..so not directly

QTS accessible via public IP is basically data suicide

[PIRATA!]

ok..cloudlink is a relay..so not directly

QTS accessible via public IP is basically data suicide

Mine is also reachable by myqnapcloud link.
I can also access my nas using the QFile app from my phone.
I have a lot of potential connecting intruders trying to access my nas as I see a lot of IPs in QFirewall trying to connect.

Is my IP exposed then?

[OneCD]

I have a lot of potential connecting intruders trying to access my nas as I see a lot of IPs in QFirewall trying to connect.

Is my IP exposed then?

It depends on whether the IP addresses from the "intruders" are external to your LAN, or within private address ranges. Post a few here if you're unsure.

QuFirewall is not exactly picky about where it thinks an intruder is. Example: it has a bad-habit of flagging the loopback IP address (127.0.0.1) as a threat.

[PIRATA!]

I have a lot of potential connecting intruders trying to access my nas as I see a lot of IPs in QFirewall trying to connect.

Is my IP exposed then?

It depends on whether the IP addresses from the "intruders" are external to your LAN, or within private address ranges. Post a few here if you're unsure.

QuFirewall is not exactly picky about where it thinks an intruder is. Example: it has a bad-habit of flagging the loopback IP address (127.0.0.1) as a threat.

They are from outside my lan.
In my lan there is only my desktop computer and some Amazon FireTV sticks: my computer is in sync using SyncBackPro for creating 1to1 backup of my files onto the nas, and the FireTVs connects to it using Plex (Plex server on nas).

[OneCD]

They are from outside my lan.

What ports are forwarded in your router to the NAS? Are you using UPnP?

[PIRATA!]

They are from outside my lan.

What ports are forwarded in your router to the NAS? Are you using UPnP?

I have to check which ports I have forwarded, maybe a couple and adult be custom, but UPnP is disabled.

[hk@hsyn.de]

They are from outside my lan.

What ports are forwarded in your router to the NAS? Are you using UPnP?

Currently i disabled UPnP again. But even if i enable it my NAS isn't reachable over local IP and does not respond to PING or SSH connection.

Here is my

[dolbyman]

better hide your WAN IP in that screenshot

@PIRATA, if external IPs are hitting your firewall, your NAS is exposed and NOT only via cloudlink (dangerous misconfiguration)

[hk@hsyn.de]

better hide your WAN IP in that screenshot

@PIRATA, if external IPs are hitting your firewall, your NAS is exposed and NOT only via cloudlink (dangerous misconfiguration)

I reconnected to the internet and got a new IP address
What config should i change? I didn't understand what you ment with misconfiguration

[dolbyman]

You have ports forwarded via upnp on manual..disable upnp and remove manual port forwards (both on router) ..they're not needed for cloudlink and expose your NAS to attacks