7

In your answers, please keep in mind that it is all about a home network.

What is the best way of protecting a network attached storage from the outside world?

Currently i have a NAS connected behind my internet gateway. On the first day of use i found "copy.exe" within one of the disks attached to the NAS.

What should i do in order making it as secure as possible?

10
  • 4
    Just because it is about a home network, does that automatically make it not sysadmin related? I do plenty of sysadmin at home, and many small businesses use "home network" hardware and software. Jun 10, 2009 at 17:33
  • This shouldn't have been closed since sysadmin covers even the smallest network, down to the individual computer level. Jun 10, 2009 at 17:33
  • I've got to agree with the other comments here. This could just as easily be a remote office or a home office that's being managed by a corporate sysadmin. Closing it as 'not sysadmin related' is not appropriate, IMO. Jun 10, 2009 at 17:38
  • 2
    I also agree this is sysadmin related. I don't think this question should be closed.
    – Bob
    Jun 10, 2009 at 17:42
  • 2
    Well it looks like some of us were born with keyboard instead of hands. I first posted the same question on stackoverflow.com. and was kindly advised to post the question to this website. And so i did. I guess i 'll have to wait for HomeNetWorkForDummiesWithSillyQuestions.com to get an answer. Thank you Kara.
    – gipap
    Jun 10, 2009 at 18:09

1 Answer 1

3

Most NAS provides some sort of built in security restrictions allowing you to limit what hosts can talk to it. Some even allow you to configure users/passwords. Anything that the vendor provides for locking it down, do it.

Additionally, make sure it is located on your network in such a way that it cannot be seen or accessed from the outside world. If you're not using some sort of router/firewall/etc that prevents inbound access, you should be.

If you want absolute best security for it you can get, pick up a cheap second switch and an extra network card. Put the second network card(s) in the box(es) that needs to access the NAS. Configure it with an IP address on a different network from your normal LAN. Run the NAS on the separate "storage only" network that isn't even directly connected to the internet-accessible network.

Basically, you have two LAN's. One is for normal network purposes, accessing the Internet, etc. The other one is just used by the NAS and devices that need to connect to it, all running on separate network hardware (network cards). By placing the NAS on a dedicated network like this, someone has to first compromise one of your computers before they can even begin to attempt to access the NAS.

[Edited to add additional clarification of a dedicated storage network.]

2
  • Could you please provide me a link related to separated "storage only" network?
    – gipap
    Jun 10, 2009 at 18:33
  • @gipap: You're kidding, right? Read the answer: "a cheap second switch and an extra network card" -- a physically separate LAN, in other words.
    – womble
    Jun 10, 2009 at 22:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .