Watch BEFORE Port Forwarding - The Complete Guide to Port Forwarding
Vložit
- čas přidán 28. 05. 2024
- This video goes over the complete guide to understanding what port forwarding is. This is critical to understand before opening anything up to the internet on your router.
Hire Me! yarboroughtechnologies.com/co...
Post on the Forums! forums.spacerex.co/
#portforwarding
#security
#homelab
TOC:
00:00 Introduction
01:23 Basic IP address setup
05:26 Accessing devices from the internet
07:34 Ports
10:15 Port forwarding rules
12:45 Security implications
15:16 Using a second router
18:05 Universal plug and play (UPnP)
21:23 Walkthrough on my router
26:25 Conclusion - Věda a technologie
man! youre a g i love how you talk super clear and concise without sounding slow and dumb lol really good job youre doing and actually helping folks
I have watched 10 videos over port forwarding & was sceptical to watch your near half an hr video. But really your way to explain is most elucid and understandable.
Thanks to finish my spree to watch videos to understand the subject.
Keep making more. & Keep it pure.
i just discovered your channel randomly and I love it........ very informative and easy to follow and understand ,,,,,, you are the best
Awesome, thank you!
You saved my life, I've been trying to do this for the last year and there wasn't a single tutorial as clear and simple as this one. THANK YOU SO SO SO MUCH
I love the facial expressions when covering UPNP. Tells the whole story right there. Great video
It takes deep understanding to explain complex topics in simple terms.
Excellent video. I work in I.T. and you really take the time to explain it well.
Man you helped me so much with my home NAS. I appreciate your dedication.
all clear! very helpful explanation
I think this is a very clear and informative explanation of port forwarding. I will watch this whole video later.
Thanks, that was a very interesting and helpful video. I had heard of port forwarding but didn't know the details. Very well explained 😊
Reminds me of a very young Brad Pitt. Hey, thanks for the awesome tutorial.
Very informative! Thank you for sharing.
Finally, I have been waiting for this for a long time 😍!!!
This was very helpful, thank you. You explained everything really well and I have already disabled UPnP because of it. I want to port forward using my Plex on my Synology NAS. Any way you can make a short video about that? I realize you are very busy, but I think that would be helpful. Thank you for all that you do. I have watched most of you videos at this point!
Thanks for the detailed info regarding port forwarding. Can you please let me know how to open port in XG-100NE router? Appreciate for your help!
Well done!
Thanks for sharing
Great video, but I have a different problem. I hope you do a video on how to find and remove port forwarding from your router. My grandson put port forwarding on my night hawk router. Now that he's gone I don't know how to find the port (s) he opened and remove them! Thanks for any help you can give.
It is very well explained video. Thanks for explaining in such simple terms.
I have been searching on the internet for understanding how to implement the same in ipv6 networks. It is quite confusing to configure, as it is said the ipv6 does not require port forwarding. All devices on ipv6 can talk to internet directly. In such a scenario, how do one exactly secure the ipv6 network. Can we still resort to port forwarding in ipv6? These are some of the questions I am looking answers for.
Very helpful video! For your international audience it would be very helpful though to also explain how it works when your ISP does not provide you with a fixed IP address, but a dynamic IP address like most European countries do. It would be great if you could add that.
Wow. I just 'got' CG NAT. Thanks.
This is helpful i was actually able to setup Ark Survival Ascended on mu Synology with this. Had to figure out which ip do i forward the Synology or the vm that is using a 10GB Nic. It was the VM thst needed outaide access 👍
I just watched your video and it gave me a better understanding of simple port forwarding on a single device. Your example Synology DMS was set to use Port 5001 (Https) which works great where I can set my router to port forward port 5001 the IP address of my Synology. Next I added a Lets Encrypt certificate which requires ports 80 and 443 to be open to renew the certificate, so I port forwarded both ports 80 and 443 to the same IP address.
The problem comes in when I add a second and third Synology both requiring a lets encrypt certificate. I can change the DMS Port to something other than 5001 (Https), however, how do I port forward ports 80 and 443 to different ip addresses?
I wish there were tutorials on configuring multiple Synologys.
Hello! I’m so glad I found your channel, this one is the best on NAS topics! I have a strange problem with my newly bought ds923+. It does have access to other devices on my LAN. I can mount remote folder to my old ds213j also could host a reverse proxy on is and point to my old NAS. However I can do all the on my old NAS: I can mount remote folder to my new NAS and host a reverse proxy on it and point to my new NAS. Old NAS is on dsm 6.2, new one is on 7.2. Any help would be much appreciated as Synology support and their forum was of no help(
Very well explained. I was still left with a few questions:
1. So any port can be used? You said this a few times but I’ve never been sure if there are some ports to avoid or what happens if two services use the same port? Are there best practices in choosing ports?
2. My crappy ISP router doesn’t have a pass through mode. I wasn’t please discovering this after receiving my new Synology RT6600ax router and could only set it up as a wifi hot point. Eventually I realized that I could set up a DMZ on the ISP and connect the Synology router that way. I haven’t had problems but can you see inherent risks doing this?
Thanks Will.
Could you do a video of how to deal with certificates, how to deal with the problems that is occuring all thetime when connections are lost / re-login is required to the NAS due to changed cert. Perhaps tutorial on how to make a self signed cert (if that is the solution).
port forward this ✊
so if i am getting a second synology with a different ip address, i need to assign it another port than the existing nas with 5000. what would i use for that 2nd synology
HI SpaceRex Can I ask for a guide on setting my ISP Modem to Pass Through Mode really appreciate your feedback thank you
Hello, I have a complex problem. In EU we're out of ipv4 on isps routers, they're are ipv6 only and does not work like bridge (passthrough). Is there any way to port forward? Do you have any idea how to do it this way? I heard something about DMZ. I have RT6600AX for home network and DS723+.
Thanks I get my webserver working as result of this fine video :-) But I cant connect using FTP and Filezilla using port 21 I hav forwarded on the router. I get the error "ECONNREFUSED" connection rejected by server. What can It be ?
your ISP may block port 21 upstream
How about port 16881 for download station on the NAS?
Such a good explanation. Thank you very much, @spacerex
Sounds like I'll have to do some digging to find out which ports what services use.
I want to try and create a more secure network at my house
I am a little confused because my Synology NAS has common forwards (e.g. 5001) and when I use the Synology control panel, it is updating the forwards on my router with uPnP. Once that is done, should I disable the uPnP on my router so that other NetworkOfThings does not open more ports? My router only shows me forwards that match my Synology right now.
You can’t use UPNP to setup ports then shut it off. The ports that were setup will just be closed. It’s either on, or it’s off. And hopefully it’s OFF!
Interesting video, thank you. I have the use case that my parents (living somewhat elsewhere) want to connect to my Synology NAS Photos. I wonder what is more secure: Setting up a port forwarding with "connect from specific IP" or letting my parents connect via VPN to my router first. In the latter case they would have access to my network and considering that their PC might be virus-infacted or else, perhals a single fowarding rule might be more secure. What do you recommend?
With a decent router you can block access to the hole network exept for te service you want to expose to your parents.
@@attackhelicopter-up3dh its an Asus AC68u so pretty decent; not pro but good enough I would say.
Thanks
I followed your instructions but Chrome is still reporting unsecure site. Certificates should be updated as well. How can I get HTTPS?
Thank you for a simple video to explain port forwarding. No need for flashy slides and music. Thank you for that.
Can I pay you to help me setup my 10 ports for a gaming server?
Also what about the firewall? I’m trying to open 10 gaming servers for Ark survival evolved for my friends to join me. Ark wiki under dedicated server has all the info there for porting. I just get so confused. I’ll Pay You straight through CZcams by tipping. I really just need help.
Just to clarify, port forwarding is done on the router-level? My Synology is allowed to have ports “open” for all its services, but those are not open to the internet unless the router was setup to forward the port? I’m running OpenVPN on my Synology and that’s the only port I have forwarded on my router so I’m good right?
That's correct. Open VPN is continuously being patched for vulnerabilities. Many devices that open ports on your router have stopped receiving updates or still use default passwords.
@@RBzee112 Thanks!
And if you cannot access your ISP router how can you set it to Pass Remote or forward and ports?
You may be able to use UnPNP. But otherwise you are out of luck
I think I still don't understand the difference between forwarding to a device and a service. If I have two computers on the web and they're both using port 80. Why doesn't the router get confused?
Cause they have different ip addresses?
This goes back to the example (12:23) of adding a 2nd Synology. They are each using port 5000, but the router will look at the incoming port and send port 5000 to the first Synology and for 5100 to the other.
Also, I think you might be confused about the two computers on the web using the port 80. If you were running Web servers on both of those computers, then you would need the port forwarding to go to the correct computer. But if you are browsing the web from those computers, it falls back to the router knowing which computer sent the request and sending the replies back to that one.
Hope that helps!
You said you were gong to 'touch' on CGNAT... did I miss?
I use Tailscale to get around cgnat
Hey there, I have a Synology NAS, on local network I am getting a speed of 700-900mbps...My internet plan is 200mbps...When I access my NAS via DSM through port forwarding I am topping only upto 10-20mbps...Can anyone help?
The speed you get when you access your NAS remotely, will be your ISP upload speed. I assume this is the 10-20mbps. You're not going to get your ISP download speed when connecting remotely, VPN, file transfer, media etc.
Both my up and down is 20pmbps..For example If I download or upload any files to google drive or any other service except Synology, I'm getting 200mbps
@@noelk6990 Maybe I don't understand your question. Are you connecting to your NAS remotely, and then doing a speed test? So your speed test is running through your NAS via a VPN?
Super Like Like Like!!!
You need to start to add IPV6 to this, no port forward need it al all, you just go directly to the IPV6 adress of the NAS, obvious you still need to open the corresponded ports on the firewall but you have to do this also in IPV4, the big advantage is that on IPV6 there is no NAT so obvious no port forward, much more simple the setup. IPV4 is starting to get obsolete fast, just look at the google stats. thanks for the video.
Yah if any of us could actually GET an IPV6 compliant ISP (Frontier, looking at you!) this might be a thing….
@@ystebadvonschlegel3295 IPV6 is already now 50% of the internet traffic, will surpass by far IPV4 this year for the first time in history, everyone will get it, is only a matter of time.
are you not using a reverse proxy? why the hell do you have so many ports open lol
Haha most of them are disabled and I leave them for history.
Then a lot of them are mapped to my clients WAN statics to allow monitoring/ backups
Good explanation of port forwarding, but most home users' routers receive dynamic IP addresses from their ISPs. Routers also assign internal IP addresses dynamically, so unless someone knows enough to work around this, the port forwarding will only work until the public IP address or the internal IP address of the target device changes. That's probably a good thing, because it's really not a good idea to set up port forwarding unless you have need for a specific service that requires it and you know how to make sure that service has robust security set up. There are safer ways to access data on the NAS remotely. Personally, I prefer to set up VPNs for this.
So thats where DDNS comes in. DDNS basically is a web address that points to a public IP address. And it's setup to update every 5 min or so. So when your public IP changes, so does your DDNS
@@SpaceRexWill, yes, I've used that before, but I'm blanking on why I used it. Might've been a case where I needed to set up a remote access VPN into a temporary site with a double NAT router situation. My main point was that a great topic for a follow-up video would be examples of when it's safe and appropriate to use port forwarding in the context of a NAS. In general, I avoid using simple port forwarding to facilitate remote access due to the security reasons that you hinted at in this video.
i thought the router was a cup with IP -.-