Network Attached Storage Security on LAN?

[jtsnow]

I have a Network Attached Storage (NAS) device on home LAN behind a Linksys
router (w/firewall) connected full time to WWW. The NAS is a backup server
that controls a USB harddrive and backs-up 4 PCs all running XP SP2. The
NAS is Linksys NSLU2 controlling a 250mb drive. I suppose this is the same
issue with the Buffalo units and any device that acts as a server on the
LAN. The NSLU2 is a Linux OS which I know nothing of.

How do I protect the disk contects on the NAS from being seen or tampered
with from someone on the WWW? Or is the firewall all I need? I not worried
about anything on the LAN, just access via WWW.

Any opinions are welcome to understand my security risks here.

Thank you!

 

[David H. Lipman]

Specifically block both TCP and UDP ports 135 ~ 139 and 445 on the Linksys Router. On many
models this can be done at the following URL... http://192.168.1.1/Filters.htm

--
Dave




| I have a Network Attached Storage (NAS) device on home LAN behind a Linksys
| router (w/firewall) connected full time to WWW. The NAS is a backup server
| that controls a USB harddrive and backs-up 4 PCs all running XP SP2. The
| NAS is Linksys NSLU2 controlling a 250mb drive. I suppose this is the same
| issue with the Buffalo units and any device that acts as a server on the
| LAN. The NSLU2 is a Linux OS which I know nothing of.
|
| How do I protect the disk contects on the NAS from being seen or tampered
| with from someone on the WWW? Or is the firewall all I need? I not worried
| about anything on the LAN, just access via WWW.
|
| Any opinions are welcome to understand my security risks here.
|
| Thank you!
|
|

 

[jtsnow]

ok....sweet...easily done.......what is it about those ports that you
suggest to close them?
thank you again!

 

[David H. Lipman]

They are the core of MS Networking. NetBIOS over IP, SMB and RPC.

--
Dave




| ok....sweet...easily done.......what is it about those ports that you
| suggest to close them?
| thank you again!

 

[jtsnow]

and MS Networking is something that should be blocked. It has security
holes or something and one normally used another type of networking?

thanks!