Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In your answers, please keep in mind that it is all about a home network.

What is the best way of protecting a network attached storage from the outside world?

Currently i have a NAS connected behind my internet gateway. On the first day of use i found "copy.exe" within one of the disks attached to the NAS.

What should i do in order making it as secure as possible?

share|improve this question
Just because it is about a home network, does that automatically make it not sysadmin related? I do plenty of sysadmin at home, and many small businesses use "home network" hardware and software. – CoverosGene Jun 10 '09 at 17:33
This shouldn't have been closed since sysadmin covers even the smallest network, down to the individual computer level. – Lance Roberts Jun 10 '09 at 17:33
I've got to agree with the other comments here. This could just as easily be a remote office or a home office that's being managed by a corporate sysadmin. Closing it as 'not sysadmin related' is not appropriate, IMO. – Christopher Cashell Jun 10 '09 at 17:38
I also agree this is sysadmin related. I don't think this question should be closed. – Bob Jun 10 '09 at 17:42
Well it looks like some of us were born with keyboard instead of hands. I first posted the same question on and was kindly advised to post the question to this website. And so i did. I guess i 'll have to wait for to get an answer. Thank you Kara. – gipap Jun 10 '09 at 18:09
up vote 3 down vote accepted

Most NAS provides some sort of built in security restrictions allowing you to limit what hosts can talk to it. Some even allow you to configure users/passwords. Anything that the vendor provides for locking it down, do it.

Additionally, make sure it is located on your network in such a way that it cannot be seen or accessed from the outside world. If you're not using some sort of router/firewall/etc that prevents inbound access, you should be.

If you want absolute best security for it you can get, pick up a cheap second switch and an extra network card. Put the second network card(s) in the box(es) that needs to access the NAS. Configure it with an IP address on a different network from your normal LAN. Run the NAS on the separate "storage only" network that isn't even directly connected to the internet-accessible network.

Basically, you have two LAN's. One is for normal network purposes, accessing the Internet, etc. The other one is just used by the NAS and devices that need to connect to it, all running on separate network hardware (network cards). By placing the NAS on a dedicated network like this, someone has to first compromise one of your computers before they can even begin to attempt to access the NAS.

[Edited to add additional clarification of a dedicated storage network.]

share|improve this answer
Could you please provide me a link related to separated "storage only" network? – gipap Jun 10 '09 at 18:33
@gipap: You're kidding, right? Read the answer: "a cheap second switch and an extra network card" -- a physically separate LAN, in other words. – womble Jun 10 '09 at 22:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.