I am running an Rsync between an internet hosted machine and my unraid server.  I need to lock down telnet access but it doesn't look like ipchains is available in unraid.  I have a ton of invalid login attempts.  I was wondering if someone had any suggestions so I can let me machine from outside still connect while not letting just anyone attempt to connect?

 

I guess I could put some hardware device between them.  My current router (please don't laugh, time machine) doesn't have those sort of options. 

 

Thanks!

 

Neil

 

I am running an Rsync between an internet hosted machine and my unraid server.   I need to lock down telnet access but it doesn't look like ipchains is available in unraid.  I have a ton of invalid login attempts.  I was wondering if someone had any suggestions so I can let me machine from outside still connect while not letting just anyone attempt to connect?

 

I guess I could put some hardware device between them.  My current router (please don't laugh, time machine) doesn't have those sort of options. 

 

Thanks!

 

Neil

 

Time to get an inexpensive router to use as your firewall.

Doesn't that seem a bit ridiculous?  Given linux as the OS you would think that having these capabilities is basic?  I don't want to power up another device and depend on it for access to my server?  I was thinking software more than hardware in this case.

It is not about Linux or not and a hostbased firewall doesn't do the same as NAT'ing (like your router will do). Follow Joe L's advice and get a $30 WRT54GL v1.1 router (unless your bandwidth is more than 35 Mbps).

Doesn't that seem a bit ridiculous?  Given linux as the OS you would think that having these capabilities is basic?  I don't want to power up another device and depend on it for access to my server?  I was thinking software more than hardware in this case.

Well... you can also put in a feature request to add ipchains to unRAID.  Do that in the Roadmap forum.

In the mean-time, a $30 router with dd-wrt will provide a solution.

I considered the routing device and I think it would be the simplest but like I said the least elegant.  What I would probably do is get the cheapo router for the internet facing link and use the other interface unrestricted.  I can use two network interfaces with unraid right?

 

Thanks!

 

Neil

 

unRAID actually only uses one interface. You can however configure the 2nd interface manually and use it for some other tasks...

I guess can I use the second interface just like the primary interface.  In other words will Unraid listen on the other card for share requests? (SMB i guess it is?)

 

Also can anyone suggest a decent model router?  Maybe a 1 gigabit model?

 

Thanks,

 

Neil

I guess can I use the second interface just like the primary interface.  In other words will Unraid listen on the other card for share requests? (SMB i guess it is?)

 

Also can anyone suggest a decent model router?  Maybe a 1 gigabit model?

 

Thanks,

 

Neil

I think it needs to be on a different subnet

Also can anyone suggest a decent model router?  Maybe a 1 gigabit model?

 

It all depends on your internet connection, ie. WAN to LAN connection speed required for your router. The WRT54GL will do up to 35 Mbps, if you need more, then get the latest Cisco E4200, it is the fastest with 650 Mbps WAN to LAN and also has a 4 port full GigE switch and has the best radio from them all. Check out broadbandreports.com

I am confused.  I really need the two interfaces to work with unraid.  Of course one can have a private IP in the 10.0.0.x subnet and the other in the 192.168.1.x subnet where the router would bring the 10.0.0.x to the 192.168.x.x subnet....

 

Thanks,

 

Neil

 

You connect ONE interface of your unRAID box to the LAN interface of your router and then connect the routers WAN interface to your internet provider. You do not touch the second interface of your unRAID box (at least not for now).

This isn't what I am hoping to achieve and I understand but I don't think I am explaining properly.  Since the interface I want to secure is connected to the other machine via the internet I can use a cheapo router and not lose any bandwidth.

 

The secondary interface I plan on using on my LAN because I am connecting to it for backups and for SageTV.  That one I would like to utilize the full 1 gigabit interface unrestricted by any device.

 

So the question is if I have both interfaces enabled will unraid allow sharing and whatnot to occur?

A router with dd-dwrt will run openVPN. This is secure and the only method I'd recommend.