Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Synology DS918+ & Netgate 2100

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    37 Posts 5 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Galactic Empire @bmeeks
      last edited by

      What Bill said but to expound a bit Windows defaults networks to Public unless they are marked Private when first connected. Annoyingly they don’t use those words it asks something like “do you want your PC to be discoverable” and if you say no it’s marked public. Which triggers a different set of firewall rules often even with third party a/v.

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote 👍 helpful posts!

      N 1 Reply Last reply Reply Quote 0
      • the otherT
        the other
        last edited by

        hey there,
        remember: in case two device are on the same subnet, pfsense (or any) have nothing to do with any routing (no routing necessary since same subnet).
        So I would rather check synology's firewall and windows's defender/firewall...
        :)

        the other

        pure amateur home user, no business or professional background
        please excuse poor english skills and typpoz :)

        1 Reply Last reply Reply Quote 0
        • N
          netboy @bmeeks
          last edited by

          @bmeeks said in Synology DS918+ & Netgate 2100:

          If they were in the same subnet, and you tried to ping by IP (and not by name), then one of the two devices either has the wrong netmask setting

          How to tell...Can you please let me know how to figure out if they have the WRONG netmask?

          bmeeksB 1 Reply Last reply Reply Quote 0
          • N
            netboy @SteveITS
            last edited by

            @SteveITS said in Synology DS918+ & Netgate 2100:

            What Bill said but to expound a bit Windows defaults networks to Public unless they are marked Private when first connected. Annoyingly they don’t use those words it asks something like “do you want your PC to be discoverable” and if you say no it’s marked public. Which triggers a different set of firewall rules often even with third party a/v.

            How to make it private? Can you kindly illustrate to how can I achieve this?

            N johnpozJ 2 Replies Last reply Reply Quote 0
            • N
              netboy @netboy
              last edited by

              @netboy
              History
              This all started when I tried to connect my sonos (LAN2) to synology which is on LAN2 - I was uaable to ....So it appears like synology is blocking the connection ....Then I tried PC in LAN2 to connect to synology in LAN2 and same thing...unable to connect

              1 Reply Last reply Reply Quote 0
              • bmeeksB
                bmeeks @netboy
                last edited by

                @netboy said in Synology DS918+ & Netgate 2100:

                How to tell...Can you please let me know how to figure out if they have the WRONG netmask?

                That is networking 101 ... 🙂. Here is a good tutorial from CloudFare: https://www.cloudflare.com/learning/network-layer/what-is-a-subnet/#:~:text=A%20subnet%2C%20or%20subnetwork%2C%20is,routers%20to%20reach%20its%20destination.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @netboy
                  last edited by

                  @netboy said in Synology DS918+ & Netgate 2100:

                  How to make it private?

                  This wouldn't really have anything to do with accessing your nas from your PC.. But it would have to do with your PC being accessed by other things on your network.. When in public mode, firewall is going to be more restrictive for inbound traffic, etc..

                  publicprivate.jpg

                  If you can not ping or access your smb shares on your nas - by IP.. And they are on the same network that screams firewall on the nas.. Even more so if you can access dsm via your browser.

                  Personally I have little use for the "nas" firewall, its on my trusted network.. Pretty much just my PC and the nas on this network - and the management IPs of my switches.. I have the nas firewall turned off.

                  dsm.jpg

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  N S 2 Replies Last reply Reply Quote 0
                  • N
                    netboy @johnpoz
                    last edited by

                    @johnpoz I think you NAILED it - My assumption is if I disable firewall in my NAS this should work - Let me try this and get back

                    N 1 Reply Last reply Reply Quote 0
                    • N
                      netboy @netboy
                      last edited by

                      @johnpoz It worked!!!! Thanks a ton to ALL for help - Sonos can see my library!!!

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @netboy
                        last edited by

                        @netboy Just to be clear, just because I have mine disabled, doesn't mean its a good idea for your network.. You have to make that decision based on your own concerns for the security of your network..

                        But this shows you for sure it was firewall on your NAS, so depending on your needs/concerns you may want to re-enable it and set appropriate rules for your neeeds.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        N 1 Reply Last reply Reply Quote 0
                        • N
                          netboy @johnpoz
                          last edited by

                          @johnpoz I completely understand....my NAS is on the trusted network (LAN1) and any user on LAN2 has ONLY read priviledges....I do understand

                          N 1 Reply Last reply Reply Quote 0
                          • N
                            netboy @netboy
                            last edited by netboy

                            @netboy Another question....

                            When my NAS firewall was ON, how come my kodi which is on LAN2 was able to access my shares in the NAS?

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @netboy
                              last edited by

                              @netboy from what you posted you have 2 different Ips on your nas - so depending on what IP you were hitting, and what the firewall was setup to allow, etc.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              N 1 Reply Last reply Reply Quote 0
                              • N
                                netboy @johnpoz
                                last edited by

                                @johnpoz My kod is on LAN2 (172) and my "secondary" LAN in synology has a LAN2 ip address. So both are in the SAME network and naturally my kodi was able to access the shares (firewall was on in synology) but I do not have any special configuration in my nas (allow or block in my synology NAS firewall is not configured). I do have some "applications" like audio, video etc configured on my synology nas that all source IPs can access.

                                My question is how kodi (with nas firewall ON) can access my shares and not SONOS? btw kodi and sonos are on the same LAN2 subnet.

                                Obviously synology is blocking but I am unable to figure this out

                                1 Reply Last reply Reply Quote 0
                                • S
                                  SteveITS Galactic Empire @johnpoz
                                  last edited by

                                  @johnpoz said in Synology DS918+ & Netgate 2100:

                                  This wouldn't really have anything to do with accessing your nas from your PC.. But it would have to do with your PC being accessed by other things on your network.. When in public mode, firewall is going to be more restrictive for inbound traffic, etc..

                                  FWIW I would normally agree but Bitdefender for instance blocks printing to a public network, because otherwise the PC may detect and try to install drivers off an untrusted printer/print server. In any case that wasn’t the issue here.

                                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                  Upvote 👍 helpful posts!

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @SteveITS
                                    last edited by

                                    @SteveITS said in Synology DS918+ & Netgate 2100:

                                    Bitdefender

                                    Did I miss where he said he was running bitdefender, and not just default windows firewall?

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    N S 2 Replies Last reply Reply Quote 0
                                    • N
                                      netboy @johnpoz
                                      last edited by netboy

                                      @johnpoz said in Synology DS918+ & Netgate 2100:

                                      Bitdefender

                                      I agree with PC but sonos is direct smb connection to nas - bitdefender does not come into this picture....Similarly Kodi is direct connection to nas using smb. Kodi works but not sonos.....I am pulling my hair and unable to figure this out

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        SteveITS Galactic Empire @johnpoz
                                        last edited by

                                        @johnpoz no, read as “third party a/v, for instance Bitdefender.” I would hope most do…? It was a thing to check, that’s all.

                                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                        Upvote 👍 helpful posts!

                                        johnpozJ N 2 Replies Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @SteveITS
                                          last edited by

                                          @SteveITS agree for sure.. I just didn't recall seeing that he was running any sort of 3rd party security software on his pc.. But sure - depending what security software your running the setting of private/public could come into play with more than just inbound connections into the pc, etc..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • N
                                            netboy @SteveITS
                                            last edited by netboy

                                            @SteveITS I am showing my firewall rules in my nas where kodi works but sonos did not . BTW the firewall is ON in nas. My kod is in a different box and not using pc. I am "removing" pc from the picture

                                            e67389d2-3f1c-48c1-b7ed-2dafa58eee62-image.png

                                            c39b411c-b29c-4f4f-a334-befb683e3ea7-image.png

                                            the otherT 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.