[145159] in North American Network Operators' Group
RE: Synology Disk DS211J
daemon@ATHENA.MIT.EDU (Jones, Barry)
Thu Sep 29 19:16:54 2011
From: "Jones, Barry" <BEJones@semprautilities.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Thu, 29 Sep 2011 16:16:44 -0700
In-Reply-To: <E36EB8E60B5EB244AAFCFEF0AF0A116D02FE359A50@MS-EX7MB-P03.corp.se.sempra.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Or, open those specific ports as needed, then close. PITA though (pain in t=
he @ss)
-----Original Message-----
From: Jones, Barry [mailto:BEJones@semprautilities.com]=20
Sent: Thursday, September 29, 2011 4:14 PM
To: 'Matthew Palmer'; nanog@nanog.org
Subject: RE: Synology Disk DS211J
Yep!=20
-----Original Message-----
From: Matthew Palmer [mailto:mpalmer@hezmatt.org]
Sent: Thursday, September 29, 2011 2:31 PM
To: nanog@nanog.org
Subject: Re: Synology Disk DS211J
On Thu, Sep 29, 2011 at 12:11:48PM -0700, Jones, Barry wrote:
> A little off topic, but wanted to share... I purchased a home storage=20
> Synology DS1511+. After configuring it on the home net, I did some=20
> captures to look at the protocols, and noticed that the DS1511+ is=20
> making outgoing connections to 59.124.41.242 (www) and 59.124.41.245=20
> (port 81 &
> 89) on a regular basis. These addresses are owned by Synology and=20
> Chungwa Telecom in Taiwan.
And this is why the prudent home admin runs a firewall device he or she can=
trust, and has a "default deny" rule in place even for outgoing connection=
s.
- Matt
