DSM-G600, DNS-3xx and NSA-220 Hack Forum

Have you thought about using an rsync server.  It won't require a recompile. It's unencrypted so it's less secure it is also significantly faster.

dom323 wrote:

Thanks for the idea. I hadn't considered using an rsync server. Unfortunately, encryption is kind of a must for me. I'm backing up some confidential company documents, and I wouldn't want to chance using an unencrypted connection. Any other ideas?

if you want it fast: no. the dns-323 cannot handle encryption well. you wont be able to transfer more than 1 mbyte/s even with a weak chipher like twofish.

Maybe you could try duplicity. It is archived incremental encrypted backups. But encrypted is encrypted may be just as slow.

@bijby: Thanks for the suggestion. I will definitely look into that as it seems to allow me to transfer with encryption without using SSH. I'll let you know when/if I'm able to get it working to test it.

@oxygen: It was my understanding that the fonz ssh was simply a packaged version of OpenSSH (that's what I saw when I typed ssh -v before the upgrade). After installing the HPN patched version of OpenSSH I get the following when I type ssh -v: OpenSSH_5.8p1-hpn13v11, OpenSSL 0.9.8k 25 Mar 2009

I take that to mean that my install simply updated the existing fonz ssh. Is that not the case? If not, how would I go about disabling fonz ssh? Anyway, I definitely hear what you're saying about encryption being slow regardless, but I should be able to do a little better than 27 kbps right? Btw, I did try using another port, and I got the same error and the same results. Also, I think you are right about HPN allowing unencrypted SSH, but again I really want to avoid that if I can.

Thanks for the link to the packages. I played around with duplicity a little bit, but its going to be a bit more complex than I was originally hoping.

I tried a couple more things to get the HPN patched OpenSSH working. In particular, I noticed an error message I never saw before when running the configure script. It said that the the poll.h file was present but couldn't be compiled. I found poll.h in /ffp/include and it was just one line including /sys/poll.h which did not exist on my system. I tried replacing poll.h with a file of that name from the libssh (http://api.libssh.org/master/poll_8h_source.html), but I just wound up with even more compile errors.

So, unless someone has any other ideas...or feels like putting together an OpenSSH-HPN ffp package I think I'll probably just stick with the standard ssh and rsync method and deal with the slow speed. I appreciate all the help. This is a really great community.

I didn't even know an ffp build environment existed. Thank you so much for pointing me in the right direction. After a decent amount of tinkering, I was finally able to get the OpenSSH with HPN patch to install and function correctly. I had to generate an ecdsa key in addition to the other keys I already had in my /ffp/etc/ssh folder, and I had some trouble getting the AES cipher to work. I wound up generating a new rsa key with a longer bit length than default and that seemed to get AES working.

I have attached the ffp package just in case anyone else is interested. If you do install it, I recommend turning on telnet until you're sure you have your ssh working reliably again. After I install this on my other NAS, I'll post back any performance difference so we can see if this has all been worth it. Thanks again for all the help. It is really appreciated.

EDIT: Ok, so the attachment doesn't seem to be working. Sorry about that. If you're interested, you can PM me and I'll try to send it to you.

Last edited by dom323 (2011-04-19 14:55:38)

At least you learned smthng, isnt all bad.