Re:QNAP ships NAS backup software with hidden credentials
by rickdeckard on Friday April 30, 2021 @07:11AM
(#26991971)
Actually, enabling the myQNAPcloud service comes with a "Auto router configuration" which makes the NAS send uPNP requests to the router for opening inbound ports.
So unless uPNP is disabled on the router (which in most cases would have to be done manually at some point), you don't need to intentionally open a port for inbound access, the QNAP NAS will do it automatically...
Re:QNAP ships NAS backup software with hidden credentials
by callmeal on Friday April 30, 2021 @06:48AM
(#26991830)
>No you can't, unless someone intentionally opened a port on the router to allow inbound access.
That's what I used to think. Then I found out about upnp on routers. I'd like to have a quiet talk with whoever thought that was a good idea.
Not unless you intentionally opened a port on the router to allow inbound access. Even default cable modems come with every port blocked by default.
Even cloud-enabled services require that the machine behind the modem/router open the connection first, so unless you're getting MITM there's no externally available access.