Remote access TS-101

[The Doc]

Could anyone help me. I am new to NAS and have just purchased a TS-101 which works great. I have searched the forum for help and adviice for setting uup Slim Server and logging into the various drives from any of my networked PC's. However I was wondering whether ther was the facility or plug-in available in order to acces my files on the NAS across the internet. I could realy do with accessing some of the files from work. Before using a NAS I used an old PC as a server and accessed it with Folder Share from Microsoft but the PC and Hard Drive failed - hence the need for more robust solution . Obviously this would require some password protection in order to prevent 'Jo Public' from accessing my files and folders. Sorry if this is a basic question but any help would be appreciated.

[simonjedrake]

One of the great selling points of the Qnap is that it can do just as you have asked.....and a hell of a lot more.

1. Use the already installed Qnap Software, under the Qnap Admin Menu - Network Settings - Web File Manager...Make sure it is ticked.
2. If you have a fixed IP address from your ISP, then use that on Port 6000, otherwise use a IP forwarding service such as www.dyndns.com who offer a FOC forwarding service for the majority of us who have Dynamic IP addresses.

I log into my Qnap from anyway in the world via the Internet.
Simon

[Andy_W]

Could anyone help me. I am new to NAS and have just purchased a TS-101 which works great. I have searched the forum for help and adviice for setting uup Slim Server and logging into the various drives from any of my networked PC's. However I was wondering whether ther was the facility or plug-in available in order to acces my files on the NAS across the internet. I could realy do with accessing some of the files from work. Before using a NAS I used an old PC as a server and accessed it with Folder Share from Microsoft but the PC and Hard Drive failed - hence the need for more robust solution . Obviously this would require some password protection in order to prevent 'Jo Public' from accessing my files and folders. Sorry if this is a basic question but any help would be appreciated.

Hi

Here is part of one of my old posts - it may help you set up your emote access.

Hi All

Not satisfied with streaming music flawlessly to my SB3, I have now configured the Qnap for external file access, which is a really useful feature for me. Thanks to Paul for guiding me through it.

All you need to do is open some ports on your router and point the open ports to the Qnap LAN address. (I will post the list of ports I used if anyone wants to try this). You also need to change your adminsitrator password to something difficult to guess as this will technically be available across the web. Also you need to change the internal settings to deny guest access. If you use the password "guest", anyone can get full access to your Qnap and this is the default. Once you change this to administrator only, even if you try to access the Qnap by drive letter, it asks for a password. This is really useful to prevent anyone deleting your music files if multiple users share the network.

Then you need to get a domain name (URL) by registering your ISP IP address you use for external access at www.dyndns.com It's free and it means that if your ISP changes the IP address, the URL will still point to the right IP number.

All you do then is type in your newly created URL and your Qnap front page should appear. If you select any of the services, it will ask you for the password. Just log in and you're there!

The only problem I have is the university where I work use Novell border manager (ugh) and this blocks the Qnap log in screen, but the IT dudes are going to adjust it for me.

[happyfishman]

I don't think I've quite got this right...

I have set up the Multimedia Station and Web File Manager for external access - Dynamic IP with Dyndns.com and have forwarded port 6000. I can browse the multimedia station from external computers using:

http://[username].dyndns.com/Qmultimedia

but I have never been successful in externally uploading to it - access is always denied. It may be partly (but not always) because it seems to want the port number in the address e.g. http://[username].dyndns.com:6000/Qmultimedia. Unfortunately most networks seem to block any addresses with specified ports.

I can't access the file manager at all using: http://[username].dyndns.com/Qfilemanager or http://[username].dyndns.com:6000/Qfilemanager

The drive is set for administrator password access only.

What am I doing wrong? Do I need to open more ports. If so what are they?

[Andy_W]

HF

I simply registered with DynDNS and I had my own URL for my dynamic IP. All I did was type that into a web browser and it directed straight to the QNAP front page. The address was not in the format you have described in your post. FYI, I think I opened Ports 3483 TCP/UDP, 900 TCP, 80TCP/UDP and 600TCP.

Once the QNAP front page was up you then simply logged in as an administrator and you could upload/download to your heart's content.

My DynDNS name expired and I forgot to update it. The firewall at work blocks out any communication on port 6000 which is a real pain. I will reset before I next go overseas though.

Hope this helps

Andy

[happyfishman]

Thanks Andy.

I rechecked my remote access and I can connect with the Qnap front end, although selecting the Multimedia Station tried to go to http://[username].dyndns.com:6000/Qmultimedia (which is blocked by my work computer) by default. If I manually remove the the port address I can log in and upload and change stuff. However, this does not work with the File Manager. Removing the ":6000" from the address returns a "the requested url '[xxxx]' was not found on this server" message, so I can't connect to the file manager using a computer that is blocked from port 6000 access. Is this right? Is there any way round it?

Sorry to ask another idiot question, but what do the ports you have suggested do? I know that 80 is for general web communication and I have a vague idea that 3483 is slimserver specific. Port 600 is indicated as a "Sun IPC Server". I have set them all up as both external and internal ports. Is this right?

[Andy_W]

HF

Sorry - think some of the port numbers I gave you were a bit duff because of my bad typing. the 900 should have been 9000 and 600 should have been 6000. 6000 is for x-windows which I think allows you to see the Qnap front end. Not sure what 9000 does - maybe FTP? Paul talked me through it a while ago.

To get full remote access I need a PC that has no firewall issues or I get timed out.

Andy

[happyfishman]

Aha! makes a bit more sense...

Unfortunately I haven't come across a computer that will allow the 6000 port number in the address, so I'm wondering whether I'll ever be able to upload files via the file manager...

[Andy_W]

HF

We had one PC on our university network that was in the DMZ which the IT dudes use for testing. It was that one I was able to make full contact on.

It is a pain that port 6000 seems to be regularly blocked

[FatBoySlim]

I found a solution to this guys, you need to use tunnelling software to get through the firewall. Have a look at:

http://www.your-freedom.net/
or
http://www.http-tunnel.com/html/

They both have limited free versions and instructions on how to configure your browser to access the proxy. 'Your Freedom' has a faster free version and can automatically setup your browser.
Works a treat from my work PC, I have full access to my TS-101.
Alias your dynamic or static IP address for free here:

http://www.dyndns.com/services/dns/

Access your TS-101 using a URL like:

http://www.<yourhostname>.dyndns.org:6000


Phil

[The Doc]

Many thanks to all of you. i now have remote access to my TS-101. At work I am behind and NHS net firewall and likewise port 6000 is blocked. Tried My Freedom tunelling software and gained acees adequate for my needs (in view of speed - 64kbps on free version). However I did have to reboot and restore PC to gain back the old proxy server settings in order access the internet without My Freedon in order to gain the usual broadband speed. Has anyone any experience with the alternative http-tunnel.com Would it be easier to turn on and off, to use orig settings when not needing to access my TS101 at home. Alternatrively, as I have to use MS IE 6 as web browser for work applications. Could I config Firefox only to use either of the tunnelling software. Many thanks to all of you.

[FatBoySlim]

You shouldn't need to reboot to gain back the old proxy server settings.

To switch tunneling access on/off:

In 'Your Freedom' select the Applications tab and check the 'Mozilla Firefox' checkbox (or MS IE) and check "Set up your applications with YF' and click OK. To restore check the 'Restore your old configuration settings' checkbox and click OK.

Or you can do it manually in Firefox:
Tools->Options->General->Connection Settings:
"Manual proxy configuration" to use tunelling s/w
"Direct Connection to Internet" to switch off.

In fact it's possible to use a very 'fine grained' approach to only tunnel when accessing a certain site and port combination e.g. your TS-101. You need to use 'Proxifier' http://www.proxifier.com/. Very cool but you have to pay for it after the trial period. I have configured it to only tunnel when accessing my TS-101 site on port 6000. If you use Proxifier you don't need to make any changes to Firefox/IE or any other app, Proxifier does it for you and it's easy to switch on/off - just a checkbox.

Phil

[flusk]

An alternative approach would be to install dropbear on the TS-101, listening on a port to which you can connect to (e.g. with PuTTY).

Then set up an ssh connection and use port forwarding so that when you browse to e.g. localhost:6000 you are forwarded to your TS-101.

There is no ready-to-go procedure for this as yet, but it should be do'able.

For some pointers see http://scratchpad.wikia.com/wiki/Qnap_Turbostation:TS101