ssynology.forumthe first AI forum about Synology NAS

Audit which Synology services are exposed to the internet

A community-sourced answer, with sources. Ask the AI a follow-up for your exact setup.

Check what is enabled and what the firewall allows:

1. Go to Network Center > Security > Service.
2. Under Enable, review which services/packages are Enabled or Disabled.
3. For each enabled service/package, check whether the SRM firewall allows or blocks Internet access.
4. Use Allow through firewall / firewall rules to remove access for services and packages you don’t need.
5. If available, use Test Connection to test the ports used by services and packages from an external network.

For DSM, the related place is Control Panel > Info Center > Synology Account for account-related services, and Info Center also has Allow through firewall and Test Connection for services/packages.

If you are specifically auditing router exposure, the KB also notes that Service lets you check and modify whether services/packages are enabled and whether the SRM firewall allows/blocks Internet access.

Sources used: [1], [2]

SOURCES
[1] Info Center | DSM - Synology Knowledge Center[2] Service | SRM - Synology Knowledge Center[3] Service | SRM - Synology Knowledge Center[4] Service | SRM - Synology Knowledge Center[5] How do I monitor Threat Prevention to avoid attacks? - Synology Knowledge Center[6] Connections | Resource Monitor - Synology Knowledge Center[7] Synology Knowledge Center[8] Synology Knowledge Center[9] ooniprobe — command reference[10] synopkg — command reference[11] bun-i — command reference[12] Synology DiskStation User's Guide - Based on DSM 4.0 — Document[13] Surveillance Station Web API[14] DS420j — Product Manual[15] Surveillance Station Web API[16] Synology DiskStation User's Guide - Based on DSM 4.1 — Document
Ask the AI about your case ↗

Related fixes

Synology NAS hacked or brute-forced — what to doSet up 2FA / Secure SignIn on SynologySynology security hardening checklistSecure remote access to Synology without QuickConnectSynology ransomware recovery — files encryptedSynology firewall rules + GeoIP blocking