DSM-G600, DNS-3xx and NSA-220 Hack Forum

There are FTP programs also that will let you change file permissions "IF" the command is supported in the FTP server  -  i use FlashFXP and it works well but I dont remember if the DNS box's FTP server supports the remote chmod command.  I will try it when I get home.

Myk

Hi ryangsoton,
I am having the same problem and have not yet found a cure. The permissions of the files change if I open, edit and then save them directly (via a shortcut to the DNS-323). They can then not be downloaded via FTP, even if the FTP client is on the same PC. I found I could change back the permissions to allow FTP access by dragging the file directly to the desktop, renaming it and then puting it back to the DNS-323. I then delete the original file and name the new file to be that of the orginal. BUT the permission change back to blocking FTP access if I edit the file again.

This applies on XP and XP Pro machines.

I have not been able to change the permissions back to allow access using any FTP client I have used.

When you change permission by adding user Everyone is the change permanent, even after further editing of the file?

Cheers
thorium90

I have no fix yet but I noticed that user thone887 is having similar problems so lets hope a fix surfaces soon. I tried editing the permissions directly on the folders in the DNS using windows folder properties but this stopped all access. Had to rename the files to get access back.  I normal run XP Home and this does not have the Security tap on folder properties. (It does if booted into Safe Mode). I will have access to XP Pro next week so I will do some more tests then.

The reason you cannot change permissions of the files on the DNS using the Windows security tab is because the DNS is running Linux and Windows uses its own securitys format that is cannot translate over to the ext2 filesystem. 

So far, I have not heard of a solution, yet.  Microsoft office likes to change the permissions on directly accessed files from the DNS to 700 (rwx------) which only allows the owner of the file full access and nobody else access.

The easiest work around is to use fun_plug to enable telnet access and use the shell to change the permissions to what you want them to be.  You could even write a simple script to do this automatically for you.

You can get all your files from FTP, you just need to FTP in as the root user.  The root user has access to all files in the system.  While this is not exactly the smartest thing to do for several reasons, it can be done.  Then again, on the other hand, ftp is also not the smartest thing to have running on a NAS anyway, since it has virtually no security.

Yes, but you would have to set the network up that way.  Probably the easiest way to do that is to set up the VPN on a different subnet than the rest of your network.  Then I would make the DNS bee seen by both subnets.  I use the VPN router for nothing but VPN and use another router for all outgoing internet traffic (my ISP allows more than one IP address).  An example would be:

DNS
IP 192.168.0.5
Subnet mask 255.255.254.0
Gateway 192.168.1.1

local PC
IP 192.168.1.3
subnet mask 255.255.254.0
gateway 192.168.1.1

main internet router
IP 192.168.1.1
subnet mask 255.255.254.0

remote VPN user
IP 192.168.0.10
subnet mask 255.255.255.0
default gateway 192.168.0.5

This way the VPN user can see nothing other than machines with IP addresses of 192.168.0.* (which is only the DNS and other VPN clients), but all the local machines can see 192.168.0.0 to 192.168.1.254.  It can even be more restricted if you know exactly how many remote machines you want to access the VPN. 

Keep in mind, this is only an example to show it is possible and your particular network may need to be configured slightly differently to work the exact way you want it to.  I also believe that the RV042 can accomplish this by itself without having to have another router for the internet, like my set-up.  I can do some test for you if you are really interested.

Next, yes, users can be restricted in the access to the directories on the DNS.  When a computer is on VPN, it is, for all practicality, on the local network and would map a drive to the DNS just like any other user.

No, this is actually what I meant in the first example of how my network is set-up.

---

Attachments:
NETWORK-MAP-1.png, Size: 19,299 bytes, Downloads: 149

What the design effectively does is to run 2 different networks over the same physical hardware.

As for your question about the VPN router, that is complecated.  It may, or it may not depending on how you want it to be seen on the network.  Most likely, yes.  The reason I say it is complecated is because it has several places to state a subnet mask, you have the lan, the wan, and the VPN (maybe).  It also depends if you want to use IPSEC (supports 50 connections) or PPTP (5 connections).  Each has advantages and disadvantages, the bigest being that Win XP and up have a built in client for PPTP.  The PPTP server on this device does not allow you to manually mask the network or select a different subnet than the LAN of the router is on, so the router would need to be configured differently and you would most likely need to use example 1 with 2 WAN IPs.  Come to think of it, I think it could be set-up using just the VPN router (example 2), but a separate DHCP server (like the DNS) to configure the network would be needed. 

If you are really interested in this as a solution, let me know and I will run some tests.  First you need to check with your ISP and see how many IP addresses you get.  I have WOW and I get up to 5 dynamic address, so I use 2 of them for my set-up.  I do this because my outgoing router is much better and more versitile than the one with the VPN, so I keep the VPN router for VPN traffic only.

bq041, have you try to install and run OpenVPN in the DNS-323? I am just curious