Remote access SFTP shares using DDNS

[psiaus]

Hi, can someone help me on how to configure my NAS to expose SFTP shares for remote access?
As far as I know having a dynamic IP I must use the DDNS service, is tha correct?
Thanks.

[father.mande]

Hi,

Yes you need DDNS ... the easy to used is myasustor.com : settings/Manuel connect
After validate in services sftp ... you must forward the SSH port (not SFTP port) you used to be visible by Internet (ez-router)

It's all
... you can used sftp (two direction) ... up to sshfs to mount in remote site a folder (or share)
... take attention to don't use root user (or ONLY because you choice to do it)
... and change port (ssh 22 by default) to limit brut force brut attack when open to Internet

... an option in ADM 5 is also to create SSH keys to don't have to used password ...

Alternatives :
You can also use a private VPN (only yours servers and client) using tailscale APKG or any other.
... in private VPN without any actions, you can used FTP (secure by Priv. VPN) and Samba as in a local LAN.

Philippe.

[psiaus]

Thak you.
I'm trying to follow your suggestions using DDNS and SSH.
I was able to succesfully activate the myasustor DDNS service.
I also configured the SSH terminal service and disabled password login, but using encrypted keys.

I tested locally the configuration accessing ssh terminal within the home LAN and I also could mount the share usign sshfs.

I also configured my openwrt router opening the personalized ssh port.

Now, how can I ssh login remotely? Do I have to use the IP address assigned in DDNS page?
Could this work:
ssh -o IdentityFile=~/id_ssh-key-myasustor-ddns -o Port=9999 UserAdmin@ddns.ip.address

[father.mande]

Hi,

Did you fill the DDNS form ... if yes (I suppose your hide the fields) use the DDNS name YOUR_NAS_NAME.myasustor.com as target NOT the I.P. , so if I.P. is changed by your provider the command stay valid ... new I.P. is reported to DDNS ...

If your client is only using command line, seems it's OK, remember that syntax is a little different for SFTP
like this : sftp -P nn User@DDNS_fqn:/path/base/of.sftp/remote

some graphics tools combine ssh and sftp in one (like mobaxterm, etc.) ...

After ssh and sftp works ... you can also add sshfs to share resources (folder) in the same way.

Philippe.