Freenas up and running security advice

[Martynez86]

Hello all,
Just got my freenas setup finaly up and running current just a 1TB Drive more drives in the post but like to get plex and by looking round for fileshare "ownclound" once install these 2 whats best next steps to make it secure from outside world manythanks in advance

 

[jgreco]

whats best next steps to make it secure from outside world manythanks in advance

Don't expose your FreeNAS to the outside world.

 

[seanm]

What parts do you plan to open to the internet?

Do you have a firewall?

One piece of advice: keep on top of security updates.

 

[Martynez86]

All new to this thinking that plug it into my network it’s on the net ... installing plex and owncloud to store / back up files just wondering then if it does it self secure within the FreeNAS system then or I got to add something else ?
I know I need to add something to make it secure for web browser access as get warned it not secure link that’s first I guess

 

[danb35]

All new to this thinking that plug it into my network it’s on the net

It shouldn't be; you should have a firewall of some sort that prevents external access to your FreeNAS server (and everything else on your network).

If you want your system to be completely secure, don't expose it to the outside world at all. But then, of course, *cloud and Plex won't work away from home. Next option, set up your router as a VPN server (your router can't do that? Change to a different router, be that pfSense/OPNSense/untangle on your own hardware, or a more capable embedded unit like a Unifi USG or EdgeRouter), and connect to your VPN when you need to access stuff in your home network from outside. Next option, set up the VPN server in a jail on your FreeNAS box. Next option, simply forward the relevant ports (80, 443, 32400) to the relevant jails, cross your fingers, and hope that the plugins are built with secure configurations.

Edit: your router is also where you'd want to be running your dynamic DNS client, if needed (i.e., you aren't on a static IP) and able.