I recently set up my new QNAP NAS, and have been accessing it through OpenVPN running on my Raspberry Pi through my home network.

For convenience, I decided to test out MyQNAPCloud, which puts it online.

I've got the SSL certs with it, but the login page isn't HTTPS (it is only after you have logged in) and I'm not too sure about having more ports open to the internet, instead of just 1194 for OpenVPN.


I'll rephrase the above. Is there a way to make the MyQNAPCloud more secure other than the obvious disabling services / not have it internet facing?

It opens up a number of ports to the internet, depending on what services are running. When closing it down to go back to the Raspberry Pi VPN and keeping everything on the local network, I found that MyQNAPCloud allowed access to my router through the internet. I'm no pentester, but I'm guessing that would be a potential avenue to go down for an attacker and pivot from there to other devices?

closed as primarily opinion-based by Xander, Ohnana, schroeder Mar 18 '16 at 22:29

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.