DSM-G600, DNS-3xx and NSA-220 Hack Forum

The point is that the Internet is an insecure network.  At any point that your data passes through somebody could capture this data and read any clear text information. Ask yourself the question if you would write down your online banking information on a postcard and send it somewhere else. Most certainly you would not do that and the same should apply to "keys" that unlock your personal data on the NAS.

FTP is good for providing access to public data, for example patches, firmware, freeware and so on but unless you consider your personal data "public" I wouldn't use ftp for it. Instead use secure ftp. Fonz supplies the package "vsftpd" for funplug 0.5 for example. Of course you will need to configure the package once it is installed to limit access to authorized users and keep out the anonymous user.

Another option is to use a VPN but for that you would need a VPN server.

You can use the ssh tunneling ability as well. That way you can establish a secure connection using ssh and tunnel some insecure protocol through it.

All of these options require configuration work but it's better to invest some time to secure your data than running an insecure configuration and complain about data that got lost, isn't it?

ok I found it here http://www.inreto.de/dns323/fun-plug/0. … kages/net/

One question - it appears the packages are all individual scripts or programs that so a certain thing. If I install funplug 0.5 does it install all these packages or do I cherrypick the ones I want?