newbie network setup

[ther]

Hi guys,

I bought a b3 yesterday and I haven't been able to fiddle with it eough yet So far I really love it since it isn't just a dumb NAS, it's a complete configurable debian server.

However my main weakness lies in network configurations, how would you set it up to run having my set-up. My internet provider is Comhem (cable) and I also have tv-services from them that requires internet connection.

My current setup: internet -> netgear-gw/router -> LAN [B3 connected via it's LAN port to a LAN port of the router]

I can reach it using it's internal ip, but I can't seem to reach it from outside [should I put it as a DMZ device in my router?]
I know using nslookup that the outside address is my gw/router's IP adress, so I guess it blocks the traffic to B3.

Any advice would be greatly appreciated

[kjellberg]

You should port-forward the ports for all the services you are using on the B3 to it.
The first one you need is port 80, the http-port. Then you might need 21 for FTP and 22 for SSH terminal connection (preferrably change it to something else because port 22 is oftenly scaned on the internet for weak connections to hack...).
After that you have to look at what special features you are using, for example squeezebox, mail, sftp, ftps, https a.s.o

If you are to set the gateway as DMZ to the B3 you should connect the B3 through the WAN connection so that the B3's built in firewall filters the connection. If you set DMZ to the LAN-port the whole internet will gain access to your Samba-shares, wich is not that secure...

[ther]

Thanks for your answer, good thing I asked first before throwing it into a DMZ, I didn't think of the Samba shares

[kjellberg]

Easy to forget

[ryz]

I would also suggest to rather open port 443 rather then port 80 and always use ssl that is https:// when connection to The B3 from outside to not send passwords and data in clear-text. I would also not recommend to use ftp to normal account for the same reason but rather use sftp instead. You can access even more data through the web and ftp interface if you do get the user password then you can from samba.