The Firewall in SoftNAS helps to control the incoming and outgoing network traffic in VPN.
As of version 5.0, all unnecessary ports for a typical SoftNAS deployment are closed, in order to ensure your security. However, this means that if you are deploying SoftNAS to handle various file protocols, you may need to configure some ports to ensure success.
To reach the SoftNAS Firewall, expand Settings from the Storage Administration Pane, and select Firewall.
| Note |
|---|
| If enabling the firewall, be sure to open up the appropriate set of ports for SSH, HTTP. HTTPS, NFS/bind, iSCSI, CIFS, etc. |
To reach the SoftNAS Firewall, expand Settings from the Storage Administration Pane, and select Firewall.
The Firewall wizard will be displayed and you will be able to perform various administrative actions.
Configuring the SoftNAS Firewall
As stated, the current SoftNAS Firewall is pre-configured, and set to restrict any ports that are deemed unnecessary to a standard deployment.
This means that only ports and protocols commonly used are configured , including such ports as NFS, CIFS/Samba, to start.
| Info |
|---|
Ports configured to start include:
|
|
Deleting a Service or Port from the SoftNAS Firewall
In order to remove a service or port, simply select the service, and hit the button below stating 'click the Delete Selected Rules'Rules button.
| Note |
|---|
| Buurst does not recommend removing default services without good reason. Please consult Buurst Support if you are unsure of which ports or services you require for your deployment. |
Adding
a Service or Port to the SoftNAS FirewallIn order to add a service or port, select either Add allowed port or Add allowed service.
Allowed Service
- For this example, you will note that we have
- NFS as a default service in the current configuration.
- This refers
- to NFSv4 only, as this is the most
- commonly used version
- at the moment.
- Let's assume
- we need to configure SoftNAS to connect with a legacy application that uses
- NFSv3.
- Select the Add allowed service link. The Add Service screen will display.
- Select the service to allow (in this example nfs3) from the dropdown.
- Once done,
- click
- the Create button.
| Note |
|---|
| Buurst's SoftNAS can allow traffic from a large list of services, as you can see on the right. |
- The service will show in the allowed list.
Adding a port is a similar process. Click Add Allowed Port and you will see the following within the screenshot on the right.
Add Allowed Port
- Select the Add allowed port link. The Add Port screen will display.
- Enter either a Single port or a Port range that you would like to allow.
- Select the Network protocol from the drop-down menu.
- Once done, click the Create button.
