Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a NAS containing media and user files encrypted on disk. I will be running FreeNAS 9.x as my operation system, OwnCloud and SABnzbd "in jail". OwnCloud will use SSL, of course. I also have a HTPC (Home theater PC‎) on my network, that runs MediaPortal and will be accessible from the Internet using AMPdroid.

I would like to have everything accessible from the Internet, but in a secure way.

What am I required to do, besides using SSL on OwnCloud?

share|improve this question
  1. Keep all software updated. That includes your OSes and Owncloud. If there's a security update for any of the software, install it.
  2. Run everything behind a NAT device, such as a router, and open only necessary ports on the router. You'll have to check the relevant documentation for what ports need to be forwarded, ie. opened on the NAT device. As an additional precaution, if the services allow you to specify ports to run them on, change them from the defaults to prevent automated scripts from attempting to hack your servers from the Internet.
  3. Set strong passwords for all logins to the devices. That means no password reuse and having adequately unpredictable and long passwords. There are good guidelines on the web on how to set good passwords.
  4. If possible, restrict access to all these to the local network only, and use a VPN such as OpenVPN to connect to the network hosting all these servers. That way, you only need to forward the OpenVPN port on your router and you'll be able to connect to these services only after connecting to the VPN.
  5. Do a check on the settings of the server software, and lock down. Disable unnecessary settings such as UPnP.
  6. Enable access logging on the servers and check them regularly for signs of intrusion.
share|improve this answer
On 2nd point, only necessary ports but If we have to open port like 443 then also somewhere hack the system using this port, why and how? Is it possible to hack the system using 80/443/22 etc, If follow the all above point ? -On my mind this question always make tarball:-| – Ravi G. Jun 1 at 12:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.