These IPs has tried to gain access to my nas (Yes, my nas is avaible public, but only if you know the passwords! )
I will keep this thread updated with replys. Please share the IPs you caught!
This thread is not to discuss the usage of black/white list. I tried the black list and i got tired of blocking all other countries but my own and yet still being blocked..
Storage: AS7004T & AS5002T
Network: FREEBOX REVOLUTION V6
Laptop: Apple MACBOOK Pro OS X El Capitan & Windows 10
Media Player: ASUSTOR NAS with Kodi 16 Beta & HD_Engine 1 (thanks Fathe_Mande)
Portable: iPhone 6S Plus, iPad Mini 2 & iPad Air
To create a very long list of IPs which cannot be entered manually as the ADM interface probably won't support it. I've had some IPs blocked when I forwarded the ssh port (22) to the NAS temporarily. I used a high port number for SSH access before and never had any blocked IPs, so I moved it back to a high port again (between 1024 and 65535). No more blocked IPs at all, though I only have a few ports forwarded to my NAS below 1024. I also stopped using the default ports for ADM (8000 and 8001). Besides that I now have geoblocking active, which should help as well.
Ok. I understand now
Thank you very much for your explanation
Storage: AS7004T & AS5002T
Network: FREEBOX REVOLUTION V6
Laptop: Apple MACBOOK Pro OS X El Capitan & Windows 10
Media Player: ASUSTOR NAS with Kodi 16 Beta & HD_Engine 1 (thanks Fathe_Mande)
Portable: iPhone 6S Plus, iPad Mini 2 & iPad Air
The point of this thread is a beginning of blocking IPs that try to access nas servers.
I have requested Asustor to add a feature named "Smart IP blocking". This would be an app that would be connected to a main server and all other Asustor servers would as well. If we then say an IP tries to access 10 or 100 nas servers they will alert the rest and the IP will be blocked so it will be blocked on the rest. I dont change port.. Why run from something you can block?
I tried the geo blocking, but even tho i whitelist my whole country i still get issues with IPs in my own country.. and thats not really that much interesting... also by blocking them we would send a signal.. maby this would be smarter from the router, but they dont offer this kinda blocking tool..
so I moved it back to a high port again (between 1024 and 65535). No more blocked IPs at all, though I only have a few ports forwarded to my NAS below 1024. I also stopped using the default ports for ADM (8000 and 8001). Besides that I now have geoblocking active, which should help as well.
It eliminates lists and such Admin intensive "work-arounds".
It requires Command Line Interface CLI access with Terminal/PuTTY to the NAS though - which can be learned ...
)
