1

I have a Synology NAS running an Apache web server with several Virtual Hosts. Currently, each vhost is associated with a different port, and my router is pointing on them individually. I also have a static IP address.

Now, let's say I want to buy a couple of domain names, and make them point on my vhosts.

What I plan to do is:

  1. On my domain names, point each A field on my IP address
  2. On my router, forward WAN port 80 to NAS port 8099 (or anything else, to not interfere with the others ports used by the NAS)
  3. Change my vhosts configuration to listen the 8099 port and redirect the user to the right website with the domain name.
  4. Same idea for the WAN port 443.

My question is: I am planning to do it right? And assuming the websites are correctly secured (I want to make public 2 websites: 1 Wordpress (obviously up to date) and 1 static (pages generated my PHP, no user interaction or upload)). Are there any security issues (eg. a risk of accessing private files on the NAS or accessing other services on other ports than 8099)?

  • When you say "redirect the user to the right website" do you mean that you are planning to reverse proxy the site from the correct port on your NAS? – Stephen Ostermiller Apr 23 '18 at 16:33
  • I actually plan to configure my vhosts with the same port (in my example, 8099), it should serve the good website according the the domain name, right? – Foxy Apr 23 '18 at 16:49
  • The big issue you have with using any NAS is that you are at the mercy of the manufacture to update their software, especially if the item becomes end of line and then the updates become fewer and fewer. Unless your device allows unrestricted management of the operating system and the services without having to wait for Firmware updates then I recommend that you avoid using it period. These devices are notorious for backdoor hacks and zero days. – Simon Hayter Apr 23 '18 at 16:52
  • And what about "hiding" the webserver in a chrooted environment? I can do it on my NAS. – Foxy Apr 23 '18 at 16:54
  • Personally I use Hardkernel ODROID XU4 with Cloudshell that comes with a unrestricted Ubuntu with no need for firmwares. Only uses a few watts and is very powerful. Synology does however have a better security reputable unlike the WD and Buffalo but still... – Simon Hayter Apr 23 '18 at 16:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.