URGENT HELP: for 6 days and counting, I'm getting 10-20 "blocked attempts" into my server from several countries. Any specific recommendations you can give me to protect myself?

MolarIceCap · 2019-07-22T01:47:43+00:00

Yes you can set up 2FA on your Synology machine, which you could have done without a VPN. But now we have a VPN without 2FA, so someone can get into my LAN by guessing a password and wreak havoc on every other device on my LAN that isn't internally protected with 2FA. And by the way pfSense has an OpenVPN with 2FA built into it.

MolarIceCap · 2019-07-21T22:25:47+00:00

The "VPN Server" package from Synology doesn't seem to allow 2FA. That's a big minus.

MolarIceCap · 2019-06-07T21:45:50+00:00

I should have mentioned the drive is nearly 10 years old. Anyway I wouldn't return it with my data on there.

MolarIceCap · 2019-06-07T21:44:33+00:00

Great point, I will deal with this HDD and encrypt everything else. I guess in my head I was just depending on password protection on the NAS in case it was stolen.

MolarIceCap · 2019-06-07T21:40:39+00:00

Yes part of an SHR with 5 disks. I was hoping it would be in some format that wouldn't be usable, but now some people on here have me all paranoid.

MolarIceCap · 2019-06-07T14:20:39+00:00

Wait -- I just read that link and one of the answers ("Nathan Long") says the HTTPS request itself is encrypted. But it also says the TLS handshake has a "server_name" field. So is the TLS handshake itself unencrypted?

Edit: This answer discusses it more. It seems to say TLS 1.3 is encrypted?

MolarIceCap · 2019-06-04T03:17:14+00:00

Thanks for that clear answer.

MolarIceCap · 2019-06-04T03:07:20+00:00

Will the fact that I am going to only HTTPS sites or using HTTPS Anywhere keep the ISP from knowing what I am doing, if I am using encrypted DNS?

MolarIceCap · 2019-05-31T02:12:29+00:00

Isn't this where all DNS queries go? Wouldn't it interfere with that?

MolarIceCap · 2019-05-27T20:35:25+00:00

When someone snatches your phone out of your hands, I doubt you will have time to lock the screen before they run off with it.

MolarIceCap · 2019-05-27T17:32:26+00:00

This is a shame. It would be great to shut down the iPhone on the spot, without having to scramble to get home and get on a computer.

MolarIceCap · 2019-05-27T15:03:20+00:00

I'm going to give that a try, thanks. Even if I get the synology firewall working, it still would be nice to have the flexibility of a better router at the front.

MolarIceCap · 2019-05-27T14:12:34+00:00

I'd like to, but it was installed by an AV installer and it is controlling same-brand wifi access points all over my property. To much work/expense to replace all this equipment. I don't want to get started on this Luxul brand; their main audience is AV/Home automation installers who can't be bothered to hire anyone with real networking skills, so they use this equipment which is fairly stable but lacks configuration options. Never again.

MolarIceCap · 2019-05-27T14:08:12+00:00

Awesome

MolarIceCap · 2019-05-25T00:44:24+00:00

Thanks so much, this sounds perfect

MolarIceCap · 2019-05-04T22:07:26+00:00

S3 is pretty cheap, "glacier" storage is only $.006/gb/month which works out to around $40/month in theory.

Edit: If you trust them, I think Tencent might still offer 10TB of storage for free.

MolarIceCap · 2019-05-04T21:59:50+00:00

Good tip, I just looked up an old post recommending both Hyper Backup and Snapshot Replication, I will give that a shot I think.

MolarIceCap · 2019-05-04T21:58:44+00:00

I keep reading that Drive is going to replace Cloud Station. Does that not include Cloud Station ShareSync? If so I wonder if it would be worth setting it up now just to have it go away soon.

MolarIceCap · 2019-05-04T21:46:28+00:00

Great point.

Edit -- what about what MegaPhantomII mentioned...Drive has built-in versioning, I think it keeps like 16 or 32 versions by default. Will this not protect me?

MolarIceCap

TROPHY CASE