Ports 80 and 443 Security issues

My Cloud OS 3 Personal & Network Attached Storage My Cloud
1

I understand port 80 is for http and 443 for https.

Do I need to open 80, plain text transmission?

If so, how can I secure the ports from not being scanned. I have disabled ping request, strong passwords, SSIDs not broadcasting etcetera…

I have enabled both and I can use the cloud from outside without a problem but I am concerned about data being intercepted.

Any advice would be great, thanks

2

TomaMate wrote:

I understand port 80 is for http and 443 for https.

Do I need to open 80, plain text transmission?

 

If so, how can I secure the ports from not being scanned. I have disabled ping request, strong passwords, SSIDs not broadcasting etcetera…

 

I have enabled both and I can use the cloud from outside without a problem but I am concerned about data being intercepted.

 

Any advice would be great, thanks

Opening ports on your router always incurs the risk that someone scans and penetrates your MyBox.

I personally would not trust the WD MyCloud software being secure because it is based on an Linux kernel which has not been upgraded for too long time.

3

@  TomaMate

You can go to https://www.grc.com/default.htm and run “ShieldsUp!” This will test your router for open, pingable ports.

 

You can also go to http://www.yougetsignal.com/ and run “Port Forwarding Tester” for finding open ports on your network. You can check port 80 and 443 explicitly if that is your concern.

 

Hope this helps :slight_smile:

1 Like
4

There is no way to hide what ports are open. Your tools will respond unless you block the IP all together. As for your other question, unfortunately Transmission doesn’t (to my knowledge) have a HTTPS web interface. Some other users have used lighttpd to essentially access the page locally over HTTP but serve it externally via HTTPS:  https://forum.transmissionbt.com/viewtopic.php?f=3&t=8163

IMPORTANT: ANYTHING exposed via HTTP (port 80) is plain text. NEVER login to your NAS or other external computer via HTTP as anyone listening at any step along the way can get your password. Rarely should you ever need to open port 80 for incoming connections but if you do, NEVER login to the page. 

5

SectorGZ wrote:

@  TomaMate

 

You can go to https://www.grc.com/default.htm and run “ShieldsUp!” This will test your router for open, pingable ports.

 

You can also go to http://www.yougetsignal.com/ and run “Port Forwarding Tester” for finding open ports on your network. You can check port 80 and 443 explicitly if that is your concern.

 

Hope this helps :slight_smile:

As djh816 writes showing a webserver on the www WAN is only possible if you have ports open.

Imho this is VERY risky, I would not do that with MyCloud!

6

I followed this guide and have transmission working on https:

http://askubuntu.com/questions/199738/how-do-i-get-https-web-interface-in-transmission

I changed transmission to port 8080 in the settings.json file and then followed that answer (just copy the whole server chunk at the end and paste it into the file he mentions)