Can't access my NAS from outside but works with VPN

Follow

Sebmegag

• December 10, 2023 12:59

Hello everbody,

Here is my setup.

Firewalla is connected to the provider box in DMZ. Behind the firewalla all my network with a Synology NAS. I routed the port needed and setup the right DDNS on my NAS.

As long as I am connected at home, all the redirections works. I can access to the NAS through the synology DDNS like xxxx.synology.me and I can acces to bitwarden on the NAS.

If I am somewhere else everything is down. No links are working and can't sync with bitwarden.

I also setup a wireguard VPN which is working great. If I connect through it then I can access to everything. So that means that my firewalla is correctly reach. But it seams that external connection are filtered.

When I did my port forwarding rules, I authorized all sources from Internet so it should block me !

Does someone have an idea where I messed up ?

Thank you all.

0

• 

  Sebmegag

  • December 10, 2023 13:01

  Forget to precise that Firewalla is in DCHP mode

  0

  Comment actions Permalink
• 

  Firewalla

  • December 10, 2023 23:19

  When you VPN, ping the NAS, does it respond? 

  If it does respond, or other devices respond and just not the NAS, you need to check the NAS configuration, make sure it is not configured to block none LAN networks. 

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 08:18

  When I am connected in VPN everything works. I just ping my NAS and it answer perfectly and all my URLs are correctly redirected to it and his services.

  As soon as I am disconnected nothing work anymore.

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 16:10

  I did some research. I put my box in bridge and still have the same issue so it come from a setting of the Firewalla.

  I tried to activate the emergency access on the NAS but it didn't change anything!

  0

  Comment actions Permalink
• 

  Firewalla

  • December 11, 2023 17:19

  If accessing your NAS via VPN works, you need to make sure to do the right port forwarding from outside to your NAS. Each NAS is different, so you may need to dig into this.

  As of secure access, VPN is a much better way to access the NAS than directly port forward. VPN has authentication and encryption, both are needed for a secure channel

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 20:54

  I am sure of my port forwarding because when I am on site I use all the external URLs and no IP adress.

  I know that VPN is Safer but I really need to access bitwarden so I need at least one forwarding and as on the NAS it is manage by a reverse proxy is still quite safe.

  I can't figure where the setup is wrong

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 21:32

  Also I tried to put the NAS on DMZ just to see if I can reach it and it doesn't work.

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 22:15

  It is like my 443 port is block even with the rules I made

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 22:17

  Even when I put my public IP with :443 I can't reach anything

  0

  Comment actions Permalink
• 

  Firewalla

  • December 11, 2023 22:19

  check synology logs and see if it rejecting the connection. I assume you forwarding 443 to synology 443?

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 22:25

  no I have no firewall on my nas.

  And when i go in the rule that I made in the firewalla the hiting counter stays at 0

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 11, 2023 22:27

  and the problem is still the same when I am on my network it works

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 23, 2023 17:02

  I found a solution.

  The best is don't use the 443 as access port. I did the same setup with port 500 and everything is working great.

  0

  Comment actions Permalink
• 

  Sebmegag

  • December 24, 2023 23:16

  Finally still doesn't work

  0

  Comment actions Permalink
• 

  Firewalla

  • December 25, 2023 23:17

  Did you check your NAS and make sure it can accept connections from a remote server? or check port forwarding if you are using it?

  0

  Comment actions Permalink

Please sign in to leave a comment.