Network Attached Storage security on LAN?

I have a Networ Attached Storage (NAS) device on home LAN behind a Linksys
router (w/firewall) connected full time to WWW. The NAS is a backup server
that controls a USB harddrive and backs up 4 PCs. The NAS is Linksys NSLU2
controlling a 250mb drive. I suppose this is the same issue with the
Buffalo units and any device that acts as a server on the LAN. The NSLU2 is
a Linux OS which I know nothing of.

How do I protect the disk contects on the NAS from being seen or tampered
with from someone on the WWW? Or is the firewall all I need? I not worried
about anything on the LAN, just access via WWW.

Any opinions are welcome to understand my security risks here.

Thank you!

jtsnow wrote:
I have a Networ Attached Storage (NAS) device on home LAN behind a Linksys
router (w/firewall) connected full time to WWW. The NAS is a backup server
that controls a USB harddrive and backs up 4 PCs. The NAS is Linksys NSLU2
controlling a 250mb drive. I suppose this is the same issue with the
Buffalo units and any device that acts as a server on the LAN. The NSLU2 is
a Linux OS which I know nothing of.

How do I protect the disk contects on the NAS from being seen or tampered
with from someone on the WWW? Or is the firewall all I need? I not worried
about anything on the LAN, just access via WWW.

Any opinions are welcome to understand my security risks here.

The firewall may well do the job just fine. But one way people using a
home LAN protect themselves in the absence of a trustworthy router
firewall is to use NetBEUI rather than TCP/IP for their LAN file and
print sharing (just disable the file/print sharing binding to TCP).

- bill

jtsnow wrote:

How do I protect the disk contects on the NAS from being seen or tampered
with from someone on the WWW? Or is the firewall all I need? I not worried
about anything on the LAN, just access via WWW.

I assume by firewall you mean a hardware router (such as Linksys or
DLINK produce) if so, that should be enough unless you've gone out of
your way to open up holes in it to allow fileshare traffic through.


--
Nik Simpson