SOLVED Can't backup on TimeMachine (AFP)

[Ragnard]

30GB RAM... really ?

My Goal is to DL some movies via torrent (legaly..... of course !) put them on my TV easily. Second, is to use OwnCloud to browse my files (my torrent too). Last is to put my own web site on the NAS and do all the configure with the DNS and other stuff to get it online (and to use OwnCloud and lunch torrent DL outside my house).

 

[danb35]

Yes, 30 GB, but I have 32 GB installed--I think it will use as much RAM as is there. I'd be very hesitant to expose FreeNAS to the Internet directly--it just isn't designed or hardened for that application. I'm not sure how much security a jail adds in this regard.

 

[jkh]

I'd be very hesitant to expose FreeNAS to the Internet directly--it just isn't designed or hardened for that application. I'm not sure how much security a jail adds in this regard.

That is very prudent of you. FreeNAS is not inherently insecure, but it is a "swiss army knife" NAS product that can run a lot of different services, any one of which is attackable if directly exposed to the internet, which is why we always tell folks put their clients and storage behind a firewall. I use pfsense at home for this purpose and it works very well - I can still OpenVPN in whenever I need access to something, so it's not like I have to give up external access to my NAS, I just have to use a VPN client and for that I also get encryption over the Big Bad Internet, which is a fine thing just in and of itself since you never know who's watching your packets go by...

Jails do add some measure of additional security since anyone compromising, say, your torrent plugin will only get access to the Jail (and any storage you have punched through into it), but that obviously does not protect all the services running *outside* of the jail, of which there are still potentially quite a few, as noted above.

 

[Ragnard]

Thank for the advice.

I don't want to expose my all NAS to internet. Just OwnCloud, and try to find a way to launch my DL from outside.
Like my own DropBox.

Plus access to my website via my domain name. I already did that from my raspbery pi (web site and access to my files). But I was limited with what can i do from my Rasp. That's why I wanted to have a NAS. I had this time I didn't have a dynamic IP. But I change my provider to get a better connexion (fiber !).

And since I'm curious, I wanted a DIY NAS ;)

I went back to school to learn programming. But I don't have a lot of knowledge about system administration & Co. That's why I challenge myself to build my own NAS.

 

[jkh]

I don't want to expose my all NAS to internet. Just OwnCloud, and try to find a way to launch my DL from outside.
Like my own DropBox.

Well, like I said, you're going to need a firewall in any case, since otherwise the entire NAS will be exposed to the internet. The firewall pieces is what keeps your exposure down to just those IPs/ports you want to forward across (like OwnCloud's). I recommend pfSense. Good luck! You'll learn a lot in this exercise.

 

[Ragnard]

Yes I know, but here in france we don't have to think about it because the provider give us with the services a box with a router, firewall, wifi.... all in one box.

Just have to manage the port (NAT/PAP) and choose which one I wanna open (all closed by default).

I open, i.e., the port ext 123 for the 22 local (ssh)... etc etc...