Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access Synology NAS externally

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 4 Posters 5.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      oxhey
      last edited by

      I have a Synology NAS connected to my pfSense firewall.

      I have enabled DDNS on the Synology which gives me a url to access my device, however when I visit that URL it takes me to the pfSense GUI.

      What do I have to do to get it to go to the Synology?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Hit it from the actual outside.. Don't try and nat reflect in from your DDNS..

        Why do you want/need this?  If your remote and need to access your synology - just vpn in your network on pfsense openvpn remote access setup.  I have a ds918+ and see zero use for their connectivity stuff.  That being said be more than happy to help you getting yours working.. Are you talking about their ezconnect when you state you setup ddns?

        https://www.synology.com/en-us/knowledgebase/DSM/tutorial/General/How_to_make_Synology_NAS_accessible_over_the_Internet

        Can fire it up and give you some screenshots both on the syn and pfsense if need to show you how to access it.. But again keep in mind from a security standpoint anything you open up to the public should be considered risky.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • O
          oxhey
          last edited by

          @johnpoz:

          Hit it from the actual outside.. Don't try and nat reflect in from your DDNS..

          Why do you want/need this?  If your remote and need to access your synology - just vpn in your network on pfsense openvpn remote access setup.  I have a ds918+ and see zero use for their connectivity stuff.  That being said be more than happy to help you getting yours working.. Are you talking about their ezconnect when you state you setup ddns?

          https://www.synology.com/en-us/knowledgebase/DSM/tutorial/General/How_to_make_Synology_NAS_accessible_over_the_Internet

          Can fire it up and give you some screenshots both on the syn and pfsense if need to show you how to access it.. But again keep in mind from a security standpoint anything you open up to the public should be considered risky.

          Its under External Access in DSM. Have a DDNS set up as with a synology.me hotsname. Mainly just so I can tell at a glance if its connected to the network and the network is still up.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            That is just typical ddns type service.. That would point a fqdn at your public IP.  Pfsense has the same sort of feature.

            If you want to actually access anything from behind pfsense from the internet you would need to port forward to your nas IP on pfsense.

            So here I fired that up.. If I want to check status of the nas I can just login into the synology account and look under my devices.  Shows Green.. The way I read that you would get an email if it goes down, etc.

            Tell at a glance from where exactly??  hitting whatever.synology.me from a device on your lan would just send you to your wan IP.. What that access would depend on what you have setup on pfsense.  Out of the box yeah it would just hit your wan IP - which would be your gui out of the box unless you setup some sort of nat reflection, etc.

            synme.png
            synme.png_thumb

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            W 1 Reply Last reply Reply Quote 0
            • W
              wufwuf @johnpoz
              last edited by

              @johnpoz said in Access Synology NAS externally:

              itting whatever.synology.me from a device on your lan would just send you to your wan IP.. What that access would de

              Dear John Pz - been wondering which way to jump:

              1. use usal port forward in pfsense + port scan blockers (snort?) for easy set up,
                OR
              2. go the more tortuous route of VPN between pfsense boxes (i have need for both offsite dsm access from laptop AND site to site hyper backup) and get into a bind with all the pipes and tunnelling, not to mention multi-site backups which complicates things further?

              at the moment inclined to go route 1) for its simplicity, but are there other schemes I have not considered or should consider?

              many thanks...

              1 Reply Last reply Reply Quote 0
              • ?
                A Former User
                last edited by

                @wufwuf

                DDNS can also be setup in pfSense! So over DDNS
                you may be able to connect to your pfSense from
                outside and then "locally" to the NAS. If you set up
                the DDNS at the Synology NAS, it is directly able to
                connect from outside, but also for other peoples!

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.