DSM-G600, DNS-3xx and NSA-220 Hack Forum

ramza76 · 2008-06-27 20:34:04

Hi to All,

I am a newbie here. I have just bought a DNS-323 with two 500 Gig HDD. I have looked through some of the threads but just couldn't find anything similar to my problem.

1. HDD: 1x Seagate, 1x Hitachi
2. Set as JB01
3. Configuration settings are default.
4. Firmware ver 1.05

The problem that I am currently having is that when I leave the DNS-323 to run overnite, the DNS-323 WEBUI cannot be access in the morning. The rest of the networking is fine and I able to access the folders in my DNS-323 but just unable to access the WEBUI change setting or adding downloads.

The only way to regain access is to hard reset the DNS-323. I have tried to reset the DNS-323 before I go to bed and hope the same problem will not occur but it is still the same. So currently I have hard reset my DNS-323 every morning to get access.

I would like to know if there are some settings that I have not set or need to be change? Is there some sort of sleep mode or quota reached? Please help me with my problem.

Thanks

fordem · 2008-06-27 20:59:02

It's the WebGUI that's hanging not the entire unit - if it was the entire unit, you would not be ableto access the folders.

Did you at any time backup and restore the configuration using the web interface?

EnricoM · 2008-06-27 21:59:08

It might be the case that your router renews the IP adres of your NAS every night. I suggest you take a look at the DHCP settings in your router and give your NAS a fixed IP adress.

ramza76 · 2008-06-28 07:16:10

Hi,

All of my PC and Laptops and including NAS have been given fixed IP addresses to prevent conflict. DMZ have been directed to the NAS also.

Thanks

mig · 2008-06-28 10:48:33

ramza76 wrote:
DMZ have been directed to the NAS also.

Perhaps someone (or some script) is trying to exploit your system and inadvertently
crashing the webGUI process (webs)? I would be interesting to see if the same overnight
crash happens if the DNS-323 is removed from the DMZ.

Also, take a look at http://dns323.kood.org/forum/t2306-look-webs-https.html for a description
of the webGUI security (or lack of security).

Last edited by mig (2008-06-28 10:49:17)

ramza76 · 2008-06-28 12:14:38

I have set my router to permit PCs with the correct MAC address be allowed to access the wifi network. The rest should be rejected. I will try removing the DMZ tonight and see what happends tomorrow morning.

Thanks.

ramza76 · 2008-06-30 03:46:59

Thanks mig,

I believe that your idea works. I have been running for two nights already and everything seem fine. But I am not too sure why DMZ will cause the webui to hang?

If there was someone that can access my wifi network, how did he do it since I have set my router to allow PCs with the MAC address that was in the permit list.

Thanx

blahsome · 2008-06-30 04:02:42

First, wireless MAC address filtering is just marginally better than no wireless security at all. Any quality sniffing software can discover legitimate wireless traffic, which contains an authorized MAC address in plain text. That authorized MAC address can then be cloned easily.

Second, MAC address filtering has no effect on a machine in a home router DMZ anyway. Putting a machine in a home router DMZ effectively exposes all its ports to the external world. A hacker can reach the machine from the Internet directly, not from a compromised wireless network.

hell0 · 2008-06-30 14:47:33

My 2cents on this Topic: The DNS 323 is pretty insecure (read the topic about the webserver!): Don't put it in a DMZ.
Secure your Wifi with WPA and a 63 characters key (you could use the generator at http://www.kurtm.net/wpa-pskgen/ )
Using WEP and/or Mac filtering will stop anyone for about 5 min max from using your network for whatever...
If you need to access your data from far away use ssh or openvpn.

Caboose · 2008-06-30 17:46:19

Another newbie,
I also just purchased a DNS-323 with FW 1.03 HW B1.
At this point, no mods to the unit, so no ssh, etc.
I opened only Port 21 on my router to the unit, created Anonymous user with read only privileges to Directory Volume 1, and started the FTP server.
I have port probed the network and have found only Port 21 being open. I have been able to access the unit outside my network OK.
After reading the above post, I am considering shutting down the FTP server and only turning it back on when I am on the road.
How secure is the FTP server in Read only mode?

ramza76 · 2008-07-01 18:33:53

Thanks for all the information and I have already taken the DMZ off.

Thanks for everything.

DSM-G600, DNS-3xx and NSA-220 Hack Forum

Announcement

#1 2008-06-27 20:34:04

DNS-323 Hang every 24 Hours.

#2 2008-06-27 20:59:02

Re: DNS-323 Hang every 24 Hours.

#3 2008-06-27 21:59:08

Re: DNS-323 Hang every 24 Hours.

#4 2008-06-28 07:16:10

Re: DNS-323 Hang every 24 Hours.

#5 2008-06-28 10:48:33

Re: DNS-323 Hang every 24 Hours.

ramza76 wrote:

#6 2008-06-28 12:14:38

Re: DNS-323 Hang every 24 Hours.

#7 2008-06-30 03:46:59

Re: DNS-323 Hang every 24 Hours.

#8 2008-06-30 04:02:42

Re: DNS-323 Hang every 24 Hours.

#9 2008-06-30 14:47:33

Re: DNS-323 Hang every 24 Hours.

#10 2008-06-30 17:46:19

Re: DNS-323 Hang every 24 Hours.

#11 2008-07-01 18:33:53

Re: DNS-323 Hang every 24 Hours.

Board footer