Sed -i '/^admin ALL=(ALL) ALL/a yourNASadminAcct ALL=(ALL) ALL' /usr/etc/sudoersĮ. # USER EDIT - Insert 'yourNASadminAcct' into /usr/etc/sudoers Include the 'sed' line (and the comments if you wish). cp -f /tmp/config/autorun.sh /tmp/config/autorun.sh.orig mount $(/sbin/hal_app -get_boot_pd port_id=0)6 /tmp/config Update 'autorun.sh' (so the 'yourNASadminAcct' can 'sudo' into the disabled 'admin' account via SSH) 1) Update the 'autorun.sh' file. Click the 'Edit Access Permissions' button. Click the 'Control Panel -> Network & File Services -> Telnet / SSH' option.ī. Verify that all applications are checked.Ĥ) Allow SSH for the 'yourNASadminAcct' account.Ī. Click the 'Edit' button for 'Edit Application Privilege'. Update the 'Edit Application Privilege' information. Verify that the 'Apply changes to subfolders' is also checked. Click the 'Edit' button for 'Shared Folder Permissions'. Update the 'Shared Folder Permissions' information. Click the 'Edit' button for 'User Group'. Enter the email address Update the 'User Group' information. Expand 'Create' and click the 'Create a User' option.Į. Also, I really hope the formatting holds.Ĭreate a New Admin Account 1) Open a web browser and navigate to:ī. I'm just offering my configuration steps for anyone that wants to do this. I'm not recommending that anyone do this. I have the 'admin' account disabled on my QNAP NAS, and I still am able to SSH into the NAS. So please take precautions because there has been an increase in attacks recently. There are multiple ways to make a NAS more secure. If you do this, I recommend having a very strong password for your myqnapcloud account. VPN removes the need to open many ports, except for 1 VPN port that can be a random port.Īnother option is to use a Qlink to remotely access your NAS without the need for port forwarding. Here are the directions.Įdit: this only protects you if you un-forward ports that were previously forwarded. 'Īnd of course, you can use QVPN to remotely access your QNAP through a VPN tunnel. For more information, please refer to the following FAQ. Other steps to strengthen the security of QNAP appliances and mitigate brute-force attacks include setting complex (strong) passwords for user accounts, enabling password policies, and disabling the admin account. Using default network ports for public services should be avoided as well. 'To take steps to avoid being hacked, QNAP recommends that users do not expose their devices on public networks. Brute force means they keep trying to guess people's passwords and people who have opened their ports to the internet and used week passwords like 1234, for example, will likely get hacked.

There are a lot of brute force attacks on QNAPs right now.

Usb endoscope camera software android