QuFirewall July Update - Great Progress!

[@Morrile1]

I came across your videos when searching information about QNAP and delighted you explain apps I didn’t know about. Going to make sure I have my NAS more secure than I first thought. Many thanks for sharing your knowledge 😁

[@MikeFaucher]

Thank you very much for the feedback and I am glad you found them helpful. I have dozens of videos on QNAP related item on the channel. Thanks again and good luck.

[@Morrile1]

@@MikeFaucher How can I install this on a QNAP TS-670 Pro?

[@MikeFaucher]

@@Morrile1 Use the QNAP app center and search for qufirewall.

[@Morrile1]

@@MikeFaucher Sadly, it's not listed as I don't have the required minimum OS, my NAS is too old yet working fine. Thanks for the advice though.

[@MikeFaucher]

@@Morrile1 Understand. Thank you for the update.

[@donsylvester5275]

The effort you make to share your expertise is much appreciated Mike. And making relatively short videos like this is great. Still, too many QNAP NAS owners would never be able to use an app like this. I can't guess the Tech proficiency of an 'average' user but it seems ridiculous to waste dev resources on an app with such a limited audience? I really like my QNAP NAS and I'll continue using it ... but it's too bad the QNAP folks are uninterested in the huge "ease of use" audience.

[@michaelflamingsword3131]

A QNAP should have a Firewall natively and easy to work with.

[@MikeFaucher]

Agreed, hope that it will continue to get easier and require less configuring on the users part. As you know, this was thrown in at the last minute to address security issues. Now that they have it out and it at least works, hopefully they will continue to enhance it.

[@MikeFaucher]

Good point. I couldn't agree more unfortunately I have yet to see an actual firewall that does not have a learning curve. Sophos, pfSense, Untangle all and UniFi all have a steep learning curve. If they could pull it off it would be great!

[@turkaykoc8587]

Thank you again for sharing your knowledge, I appreaciate it very much.

[@MikeFaucher]

Glad you found it useful. Thank you!.

[@dereklawrence8233]

Hi Mike just saw your video and subscribed to your channel. I am puzzled by the lack of events you are experiencing. I am getting hammered on a daily basis. In 24 hours I am seeing 20,000+ events daily? Any idea why such a large amount? Wonder how may you and your subscribers are seeing? Thank you sir!

[@MikeFaucher]

Thanks for the sub. It is a tough question to answer as there could be dozens of reasons this could happen. Have you ran the event capture? Is this on a local lan only? What services such as plex, vpn, torrents, etc do you have enabled as this is often where the problem is. You will have to review the event capture but my guess is that something on your network is allowing a lot of incoming traffic. Remember that hits to your firewall don't necessarily come from, and usually don't come from the NAS. The fact it is being blocked is good thing but to find the source I would start by unplugging all other devices on your network except the NAS including smart TVs, home automation etc., and see what happens and see if the count goes down. If it does, start plugging things in one at a time and keep checking to see if you can find the culprit. If it does not go down, then there are some issues with the configuration of the NAS. 99% of high event count come from somewhere on your network other than your NAS.

[@dereklawrence8233]

@@MikeFaucher thanks, my nas is a simple backup device and a video recorder. I have 5 network cameras. I have ran trace route back to the source and they are coming from all over the planet. South Korea, China, Great Britain…you name it. I do use some of the QNAP apps on my Apple devices remotely.

[@MikeFaucher]

@@dereklawrence8233 Cameras are notorious. Keep disconnecting and disable services until you find it.

[@MikeFaucher]

One more thing. If you are getting that many hits from countries your NAS is exposed to the internet. I would definitely start with apps and port forward.

[@dereklawrence8233]

@@MikeFaucher I think I found it. They were all forwarded via port 6881, which I am sure I have never configured in in my router or in download station. I do not use bit torrent. Disabled that rule in my router and in Download Station. I am certainly glad I watched your video. This was certainly worth watching.

[@michaelflamingsword3131]

Hey Mike, if you want something added, you can do a feature suggestion to one of the members of the team with a support ticket. I did one for Photo Station to update the social media options to put more recent social media options in it. If you do as well this helps. I will do this with the QuFirewall of what you are asking for, so at least a couple of people ask for the same. Like for Photo Station has some very old Social media send options and also Chinese ones that we never use. Have a look around of what I mean.

[@MikeFaucher]

Good idea. Thanks.

[@michaelflamingsword3131]

@@MikeFaucher I have left a Support ticket with Qnap today. Briefly mentioned you if you don't mind and see what happens.

[@DavidM2002]

Mike, I don't have my QNAP available on the internet; strictly in home access. Is it still worth setting up the firewall ? I did it anyway just for the learning experience but am not sure if I should keep it or not.

[@MikeFaucher]

Definitely yes. Sometimes things can come into your network via a different device. I have mine running on all my NAS units and sometimes I am surprised what can ping any device on your network.

[@loydbrush2041]

I’ve setup the firewall to only allow the IP address I want to let in. There is a United States regional setting. Is the regional setting needed? Wouldn’t this allow access to anything in the Unit States into the Nas?

[@MikeFaucher]

@@loydbrush2041 you are correct. It is not needed as if you are blocking everything but a local ip those settings are not needed.