control ipv4/ipv6 ports open

Tell us your most wanted features from QNAP products.
Post Reply
ricka
New here
Posts: 3
Joined: Thu Mar 05, 2020 10:07 pm

control ipv4/ipv6 ports open

Post by ricka » Thu Mar 05, 2020 10:19 pm

I would like to "close" some TCP ports
about ipv6, leaving others open, example of my current scenario:
open doors:
Discovered open port 22,80,443, 445,139,8080,631 on / tcp on 2001: db8 :: 1
my desired scenario is open port 22 and 443 only.Today I use external access only for administration and my IPv4 is under CGNAT so there is no risk for this protocol.
QNAP controls only IP but I receive Dynamic IPv6.
Any Ideas? Thank you

User avatar
OneCD
Ask me anything
Posts: 7969
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: control ipv4/ipv6 ports open

Post by OneCD » Fri Mar 06, 2020 3:51 am

Hi and welcome to the forum. :)
ricka wrote:
Thu Mar 05, 2020 10:19 pm
I would like to "close" some TCP ports
about ipv6, leaving others open, example of my current scenario:
open doors:
Discovered open port 22,80,443, 445,139,8080,631 on / tcp on 2001: db8 :: 1
If you don't want the services listening on those ports to be accessible, then you can either:
  • ensure your router isn't forwarding incoming requests on those ports to your NAS,
  • kill those services in your NAS.
Pick one.

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage

ricka
New here
Posts: 3
Joined: Thu Mar 05, 2020 10:07 pm

Re: control ipv4/ipv6 ports open

Post by ricka » Fri Mar 06, 2020 3:59 am

In dinamic IPv6, can't control this ports on firewall, but I can define "level" of security.
If I kill smb, I kill server together
Thank you

User avatar
OneCD
Ask me anything
Posts: 7969
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: control ipv4/ipv6 ports open

Post by OneCD » Fri Mar 06, 2020 4:08 am

ricka wrote:
Fri Mar 06, 2020 3:59 am
In dinamic IPv6, can't control this ports on firewall, but I can define "level" of security.
If you're dealing with CGNAT, exposed ports shouldn't be a problem anyway. The usual difficulty is trying to get local services exposed via GCNAT.

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage

ricka
New here
Posts: 3
Joined: Thu Mar 05, 2020 10:07 pm

Re: control ipv4/ipv6 ports open

Post by ricka » Fri Mar 06, 2020 4:26 am

I have 2 protocols. Ipv4 under CGNAT and ipv6 dinamic...

Post Reply

Return to “Features Wanted”