Open up Remote services (other protocols besides CIFS/AFP)

[chirpa]

There is a non-documented way to enable using Remote for other protocols/services. For those tinkerers out there, this enables you to do a lot more.

You could run NFS, iSCSI, IPP, SSH, FrontView HTTPS, etc over the Remote 'VPN' connection. Do more with what you already have. It does require SSH right now to modify a configuration file on the NAS.

The configuration file that requires modification is: /opt/leaf/conf/nas/lnconfiguration.xml

Here is an example of the contents:

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<Configuration>
        <AccountInformation>
                <Username>CaponeNAS</Username>
                <Password>!thepassword!</Password>
        </AccountInformation>
        <ConnectionSettings>
                <UseProxy>False</UseProxy>
                <ProxyType Value="HTTP" Address="" Port="">
                        <Username></Username>
                        <Password></Password>
                </ProxyType>
                <Authtentication Value="False"/>
                <UsePortForwarding>True</UsePortForwarding>
                <PortForwarding Protocol="TCP" Port="6300"/>
        </ConnectionSettings>
</Configuration>

We need to add this section right after <Configuration>, and restart Remote under Installed Add-ons:

Code: Select all

        <Settings>
                <Firewall>0</Firewall>
        </Settings>

The file should now look like:

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<Configuration>
        <Settings>
                <Firewall>0</Firewall>
        </Settings>
        <AccountInformation>
                <Username>CaponeNAS</Username>
                <Password>!thepassword!</Password>
        </AccountInformation>
        <ConnectionSettings>
                <UseProxy>False</UseProxy>
                <ProxyType Value="HTTP" Address="" Port="">
                        <Username></Username>
                        <Password></Password>
                </ProxyType>
                <Authtentication Value="False"/>
                <UsePortForwarding>True</UsePortForwarding>
                <PortForwarding Protocol="TCP" Port="6300"/>
        </ConnectionSettings>
</Configuration>

Now open the Remote client on your PC. Under Properties>Advanced, remove the checkbox for Enable Firewall.


You can now use the Remote tunnel for pretty much anything. As always, NTGR support will not help with any issues you encounter while doing this.

[mdgm]

So why do you disable this by default? This could be quite useful if written properly for allowing tech support SSHing into the NAS without having to punch a hole in the router's firewall.

Also as great a fix as this is, it doesn't solve the issue that different ReadyNAS often end up on different subnets on the VPN, so transfers NAS to NAS using ReadyNAS Remote aren't really helped by this solution.

[chirpa]

Security is part of it. And in the beginning Remote was from Leaf Networks, a separate company. But they are now part of us, which makes things easier.

[ksaraf]

I just don't understand why ReadyNAS team seems to cater so much more to hackers and tinkerers rather than the general consumer. Seems like if I was average Joe, I should go with another company because everything is already built in!

[ksaraf]

Ok, lets say I do this. Then would you please tell me how to get to mount my attached printer?
Please give me actual instructions, I am pretty adept at Win & Mac, don't know much about Unix.

[chirpa]

It would probably be better for super-poussin or someone to create an add-on, which can toggle these settings without requiring command line tweaks.

Then, you could add http://MY_NAS:631/printer_name on the PC with Remote, and you could print to your home from anywhere you are in the world connected to the Internet.

[ksaraf]

Can you explain to me what <Firewall>0</Firewall> means exactly? Aren't you turning off the firewall? Isn't that generally a bad idea?

[chirpa]

It turns off the client firewall. By default, it only allows CIFS and AFP traffic. Adding that line allows other ports to work as well.

You are still secure, because Remote creates a direct connection between your authorized devices only. On the NAS you had to add the username of your PC client before they could talk to each other.

[mdgm]

It would probably be better for super-poussin or someone to create an add-on, which can toggle these settings without requiring command line tweaks.

Could this be done using the SDK xmlutils?

[chirpa]

Yeah, but even a simple sed/awk line could insert/remove it.

[mdgm]

I've just about written something. Should have it ready soon.

[mdgm]

It would probably be better for super-poussin or someone to create an add-on, which can toggle these settings without requiring command line tweaks.

Here you go:
Here's the x86 version: ToggleRemoteFirewall_0.2-x86.bin

Here's the Sparc version: ToggleRemoteFirewall_0.2-nsp.bin

Installation is via System > Update > Local in Frontview. You will be alerted as to what happens. If you have a problem with the add-on installation let me know.

[mdgm]

Edit: It appears ReadyNAS Remote needs to be restarted for the changes to take effect. Will fix this in the add-on now.

Edit: Should've read chirpa's opening post more thoroughly which makes it clear that ReadyNAS Remote needs to be restarted.

[mdgm]

Updated with 0.2. This will restart ReadyNAS Remote if it is enabled which should force the configuration changes to take effect.

[ksaraf]

Sigh! Thank you all for your help. Just realized after doing all this that the MAC version of Remote does not have an Advanced tab to turn off firewall.
Also, even when connected to my local network, I cannot get to my NAS in a browser by typing the name, just by IP address, so I don't know how you guys are doing it.
https://10.0.10.150:631/printers/HP_LaserJe_1 - works
https://MY-NAS:631/printers/HP_LaserJe_1 - does not work