使用Synology NAS建置WebDEV Server.

      Windows Client端需有以下設定：
  1. 打開[服務] (控制台\所有控制台項目\系統管理工具) -> 啟動[WebClient]。
  2. 打開登錄檔 (開始 -> 搜尋視窗打regedit) -> [BasicAuthLevel]改為2 (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters\BasicAuthLevel)
            0 - Basic authentication disabled
            1 - Basic authentication enabled for SSL shares only
            2 or greater - Basic authentication enabled for SSL shares and for non-SSL shares

  1. 登入Synology的套件中心，搜尋WebDEV即可[下一步]、[下一步]安裝。
  2. 須注意HTTP及HTTPS連接埠，強烈建議使用HTTPS，因HTTP的帳密以明文傳送，若是因資安 因素使用WebDEV而使用HTTP就沒意思了。
  3. 使用Windows內建網路磁碟機連線(可先用WinSCP確認服務是否正常)。官方建議是用RaiDrive 或 Cyberduck等工具連線比較穩定。(RaiDrive測試ok，不需修改regedit)
  4. 安裝方式如下圖，主要hostname走https不可用IP。




SMB
直接執行在 TCP 上 port 445，通過使用 NetBIOS API (在全windows環境下不需此通訊協定) TCP ports 137, 139 (NetBIOS over TCP/IP)。
Adv: 速度快，易安裝使用，安裝成功後使用穩定。
Disadv: 資安問題，網路上很多人不建議使用。Windows 10以後仍有更新，目前最新為3.1.1，在安全性上有提升，代表微軟仍不放棄此技術。 

WebDEV
Adv: 架構在http下的協議，避開445的資安威脅
Disadv: Windows下的網路磁碟機連線不穩，需修改regedit或是使用第3方軟體連線





留言

張貼留言

這個網誌中的熱門文章

Disable ICMP timestamp response

ISMS Audit Report CVE-1999-0524 3.3.11. ICMP timestamp response (generic-icmp-timestamp) The remote host responded to an ICMP timestamp request. The ICMP timestamp response contains the remote host's date and time. This information could theoretically be used against some systems to exploit weak time-based random number generators in other services. In addition, the versions of some operating systems can be accurately fingerprinted by analyzing their responses to invalid ICMP timestamp requests. Solution: Disable ICMP timestamp responses Disable ICMP timestamp replies for the device. If the device does not support this level of configuration, the easiest and most effective solution is to configure your firewall to block incoming and outgoing ICMP packets with ICMP types 13 (timestamp request) and 14 (timestamp response). Command(windows): netsh advfirewall firewall add rule name="Block Type 13 ICMP V4" protocol=icmpv4:13,any dir=in action=block netsh advfirewall firewall ...
閱讀完整內容