DSM-G600, DNS-3xx and NSA-220 Hack Forum

1. I wouldn't assign dynamic addresses to server components like the NAS. You would at least need to make sure that your DNS server knows the address of the NAS to be able to reach it via its name. You could as well use DHCP and assign the NAS a fixed address via DHCP.

2. The static address from an internal network is probably the best of your scenarios because you would conceal the NAS from the outside world and would only need to forward one port from you router to the NAS.

3. I wouldn't expose the NAS directly to the Internet. You have no way to patch the firmware and all security holes can be abused by the outside world if they have direct access to the NAS.


You could put the NAS in a DMZ between you internet access router and your company firewall. That would be the safest solution but will require additional hardware.

netmation wrote:

Thanks SilverSurfer,

I'm glad that the static IP on an internal network is best according to your recommendation, since that is what was initally setup for me in my shared office.  I don't logically understand though how can the outside world find it though if the IP address of my router is an internal IP 192.168.xx.xx.

The outside world connects to the public ip address of your router and is then forwarded to the internal ip address of your DNS-323.

See www.portforward.com

I think I may need to go into a little more detailed explanation here.

Any router connecting to the internet must have a public ip address on it's external interface - it may have a public ip address (from a different subnet) or it may have a private ip address on the internal interface.

If both interfaces have public ip addresses, the router will have specific routing tables that tell it how to "route" the ip traffic as required, but if the internal interface has a private ip address, then a process known as NAT or Network Address Translation will be used to share the single public ip address amongst several private ip addresses.

Most small businesses use NAT routers

If your DIR-655 has a 192.168.x.x address on it's WAN interface, then there is a very good chance that the office complex you are in is using a NAT router to share the public ip address - you would need to configure this router to forward the appropriate port to your router (the DIR-655), and then you would need to configure your router (the DIR-655) to forward the port to the DNS-323.

An easier way might be to configure the first router so that your router (the DIR-655) is in it's DMZ (De Militarized Zone).

Obviously this will need access to the first router and the problem you may face will be a "conflict" with another occupant needing to use the same port as you do.

If you can get a public ip for your router's WAN interface - do it - it'll make your life easier.