Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[robertg]

I'm not the most computer savvy person. I've purchased a dns-323 and would like a bit of advice. I want to be able to access my files from the web as securely as possible. I believe that it needs to be setup as an FTP server, correct? I think that I've done that properly, I've created users in the 323, I think that I've setup the virtual server in the router properly, but I'm not sure whether or not to check the box beside "Report external IP in Passive mode" as well as the box beside "Allow SSL/TLS connection only". My internet provider uses dynamic IP so I have created a host with DlinkDDNS. Do I need to set up DDNS in the router(dlink dir-615), in the dns-323, or both? I set the dns-323 to have a static ip as recommended when using as an FTP server. I would appreciate any advice on router/dns-323 settings and/or setup to achieve access to my dns-323 from the web as securely as possible.
Thanks, Rob.

[redant2u]

Rob
on the SSL/TSL & Report external IP in Passive mode - i can not comment but with the dynamic DDNS yes you have to set it up to the router and point it to the DNS323 ftp + on the dns 323 you need to add you dynamic DDNS info. this means the Internet need to see the router and then pass through it to your FTP server.

I use a static IP with an ftp server on an DNS323 and will help where i can...

here is a look at my setting on the 323 that may assist you.

ftp://196.44.233.45/DNS%20323%20ftp%201.png
ftp://196.44.233.45/DNS%20323%20ftp%202.png

Hope it helps.

[robertg]

Thanks for your reply. I noticed that the boxes that I referred to aren't showing up in the "ftp server settings:" area on yours. I have firmware version 1.08 and my hardware is C1. Is your router a dlink, and have you set up the ddns the same way in the router (mine has basically the exact same thing in both the router and the 323, I'm referring to your second image of ddns settings)?

[fordem]

I would appreciate any advice on router/dns-323 settings and/or setup to achieve access to my dns-323 from the web as securely as possible.
Thanks, Rob.

Set up the DDNS in one place only - I prefer to do it in the router, but the choice is yours.

Report external ip in passive mode IS required if you plan to use passive mode across the internet - if you don't the ftp server will send it's internal address and the connection will fail - if you're not using passive ftp, it can be ignored.

Allow SSL & TSL connections only - is self explanatory - you check it if you wish to block ftp connections that do not use SSL & TSL.  This may be a bit of a moot point, since everything I have seen suggests that secure ftp does not work properly on this box - I haven't personally tried it so I won't comment further.

[robertg]

Thanks for your input, fordem. Are you recommending that the SSL/TLS box should be checked to activate the setting? (assuming that it actually does prevent non-ssl/tls connections from occurring). I realize that it is probably self-explanatory to most, but could it prevent me from connecting to my 323 from the web somehow if it is enabled? Please forgive me if my questions seem ignorant... but I am in these areas.
How do I know if I am planning to use passive mode across the internet? I don't really know what passive ftp is but I think I should activate it as my router acts as a firewall?
Also, do i use the hostname that I created on dlinkddns.com as the web address to locate my 323 on the web?
Thanks again, Rob

[redant2u]

Jip I'm still running on FW 1.7 seems not all the bugs are out of 1.8 but it looks like your on the right track and "fordem" is a guru - hope it turns out well.

[sq_guru]

Enabling the SSL/TLS only connectivity by checking that box will only allow sFTP (secure FTP) connections.  To do this your FTP server and client must be configured with a certificate or pre-shared key.  sFTP would normally encrypt the FTP session authentication data (username and password) as well as the file transfer data, but from what I've read the current version of firmware will only support encryption of the session auth.  File transfer data is sent in clear text.  Basically it comes down to whether or not security of your file transfers is an absolute concern.  Chances of your transfers being captured and sniffed is pretty minimal unless you're serving up some national secrets that everyone is trying to hack into.

I'd say just leave it unchecked (clear text) and go with it.  That's the way I run mine.  If you want to make sure your FTP hasn't been compromised, just check your FTP log file temporarily or have your NAS send them to you via email.