You saved my life, I've been trying to do this for the last year and there wasn't a single tutorial as clear and simple as this one. THANK YOU SO SO SO MUCH
I have watched 10 videos over port forwarding & was sceptical to watch your near half an hr video. But really your way to explain is most elucid and understandable. Thanks to finish my spree to watch videos to understand the subject. Keep making more. & Keep it pure.
Man I love how you explain tech on a lower simple level that even a person not in the IT space can understand. Couldn't help but paused the vid and rushed to smash that subscribe button. 😁
Bravo! Super clear explanations that lifted the fog for a noob on what ports are, port forwarding, and particularly, port forwarding in a double NAT setup. Suggestion: Perhaps enable 2-factor authentication on the NAS to enhance security?
Very nice explanation. One thing I'd like to point is that traffic always hits a router upstream, which likely hits another router and so on, not only when CGNAT is deployed. The difference is that the typical ISP router does not implement NAT.
Really helpful again!! Your explanation of what to do with a router behind a router really saved me when I was setting up a VPN and couldn't get the routers forwarded correctly. Great job!! Also, for the first time think I almost understand port forwarding---almost :)
Very helpful video! For your international audience it would be very helpful though to also explain how it works when your ISP does not provide you with a fixed IP address, but a dynamic IP address like most European countries do. It would be great if you could add that.
This was very helpful, thank you. You explained everything really well and I have already disabled UPnP because of it. I want to port forward using my Plex on my Synology NAS. Any way you can make a short video about that? I realize you are very busy, but I think that would be helpful. Thank you for all that you do. I have watched most of you videos at this point!
I just watched your video and it gave me a better understanding of simple port forwarding on a single device. Your example Synology DMS was set to use Port 5001 (Https) which works great where I can set my router to port forward port 5001 the IP address of my Synology. Next I added a Lets Encrypt certificate which requires ports 80 and 443 to be open to renew the certificate, so I port forwarded both ports 80 and 443 to the same IP address. The problem comes in when I add a second and third Synology both requiring a lets encrypt certificate. I can change the DMS Port to something other than 5001 (Https), however, how do I port forward ports 80 and 443 to different ip addresses? I wish there were tutorials on configuring multiple Synologys.
It is very well explained video. Thanks for explaining in such simple terms. I have been searching on the internet for understanding how to implement the same in ipv6 networks. It is quite confusing to configure, as it is said the ipv6 does not require port forwarding. All devices on ipv6 can talk to internet directly. In such a scenario, how do one exactly secure the ipv6 network. Can we still resort to port forwarding in ipv6? These are some of the questions I am looking answers for.
Very well explained. I was still left with a few questions: 1. So any port can be used? You said this a few times but I’ve never been sure if there are some ports to avoid or what happens if two services use the same port? Are there best practices in choosing ports? 2. My crappy ISP router doesn’t have a pass through mode. I wasn’t please discovering this after receiving my new Synology RT6600ax router and could only set it up as a wifi hot point. Eventually I realized that I could set up a DMZ on the ISP and connect the Synology router that way. I haven’t had problems but can you see inherent risks doing this?
Great video, but I have a different problem. I hope you do a video on how to find and remove port forwarding from your router. My grandson put port forwarding on my night hawk router. Now that he's gone I don't know how to find the port (s) he opened and remove them! Thanks for any help you can give.
Thanks Will. Could you do a video of how to deal with certificates, how to deal with the problems that is occuring all thetime when connections are lost / re-login is required to the NAS due to changed cert. Perhaps tutorial on how to make a self signed cert (if that is the solution).
This is helpful i was actually able to setup Ark Survival Ascended on mu Synology with this. Had to figure out which ip do i forward the Synology or the vm that is using a 10GB Nic. It was the VM thst needed outaide access 👍
Nice video loved it and really helpful. I am trying to port forward my NAS via smb but how do I make it secure. Auto lock? Extremely difficult passwords?
Hello! I’m so glad I found your channel, this one is the best on NAS topics! I have a strange problem with my newly bought ds923+. It does have access to other devices on my LAN. I can mount remote folder to my old ds213j also could host a reverse proxy on is and point to my old NAS. However I can do all the on my old NAS: I can mount remote folder to my new NAS and host a reverse proxy on it and point to my new NAS. Old NAS is on dsm 6.2, new one is on 7.2. Any help would be much appreciated as Synology support and their forum was of no help(
Thanks I find it very useful. I have another scenario and would like your advice. I have a dual routers network. Router 1 TP link Ax 55 connected to internet and router 2 Asus AC87U lan to lan to router 1. I have TP link enabled with pptp and openvpn server. I have attached an USB drive to Asus router (2nd router). When I am on home network (either on wifi of TP Link or Asus), I can access Asus USB drive. But when I am outside the network, I used VPN back to TP Link, I cannot access Asus USB drive. Is there a way to config the routers to make it work. I researched a lot about this, some say using port forwarding and lan route, but I have no luck with any of these. Please advise, thanks in advance.
Thank you for explaining what port forwarding is. I have a problem with my Xbox series X and some people recommend to do a port forwarding. I have a double Nat detected and is moderate I tried almost everything but cant get it to fix. I have a TP link router and cant find the Nat configuration to set it open. Any ideas will be appreciate
Do you offer your clients a DSM-access via Internet? What would be a more secure solution? Personally I use VPN, but a quick access for a customer via DSM-Acount would be cool also, e.g. for sharing stuff.
Thank you for a simple video to explain port forwarding. No need for flashy slides and music. Thank you for that. Can I pay you to help me setup my 10 ports for a gaming server? Also what about the firewall? I’m trying to open 10 gaming servers for Ark survival evolved for my friends to join me. Ark wiki under dedicated server has all the info there for porting. I just get so confused. I’ll Pay You straight through RUclips by tipping. I really just need help.
Port Forwarding is an issue on some ISP's routers. My router does not let me access Port Forwarding. I considered a new ISP but discovered that their didn't allow it either. Is this a growing problem?
I am a little confused because my Synology NAS has common forwards (e.g. 5001) and when I use the Synology control panel, it is updating the forwards on my router with uPnP. Once that is done, should I disable the uPnP on my router so that other NetworkOfThings does not open more ports? My router only shows me forwards that match my Synology right now.
You can’t use UPNP to setup ports then shut it off. The ports that were setup will just be closed. It’s either on, or it’s off. And hopefully it’s OFF!
Hello, I have a complex problem. In EU we're out of ipv4 on isps routers, they're are ipv6 only and does not work like bridge (passthrough). Is there any way to port forward? Do you have any idea how to do it this way? I heard something about DMZ. I have RT6600AX for home network and DS723+.
Interesting video, thank you. I have the use case that my parents (living somewhat elsewhere) want to connect to my Synology NAS Photos. I wonder what is more secure: Setting up a port forwarding with "connect from specific IP" or letting my parents connect via VPN to my router first. In the latter case they would have access to my network and considering that their PC might be virus-infacted or else, perhals a single fowarding rule might be more secure. What do you recommend?
Just to clarify, port forwarding is done on the router-level? My Synology is allowed to have ports “open” for all its services, but those are not open to the internet unless the router was setup to forward the port? I’m running OpenVPN on my Synology and that’s the only port I have forwarded on my router so I’m good right?
That's correct. Open VPN is continuously being patched for vulnerabilities. Many devices that open ports on your router have stopped receiving updates or still use default passwords.
Good explanation of port forwarding, but most home users' routers receive dynamic IP addresses from their ISPs. Routers also assign internal IP addresses dynamically, so unless someone knows enough to work around this, the port forwarding will only work until the public IP address or the internal IP address of the target device changes. That's probably a good thing, because it's really not a good idea to set up port forwarding unless you have need for a specific service that requires it and you know how to make sure that service has robust security set up. There are safer ways to access data on the NAS remotely. Personally, I prefer to set up VPNs for this.
So thats where DDNS comes in. DDNS basically is a web address that points to a public IP address. And it's setup to update every 5 min or so. So when your public IP changes, so does your DDNS
@@SpaceRexWill, yes, I've used that before, but I'm blanking on why I used it. Might've been a case where I needed to set up a remote access VPN into a temporary site with a double NAT router situation. My main point was that a great topic for a follow-up video would be examples of when it's safe and appropriate to use port forwarding in the context of a NAS. In general, I avoid using simple port forwarding to facilitate remote access due to the security reasons that you hinted at in this video.
Thanks I get my webserver working as result of this fine video :-) But I cant connect using FTP and Filezilla using port 21 I hav forwarded on the router. I get the error "ECONNREFUSED" connection rejected by server. What can It be ?
I have a question. On my synology nas whenever I set up router and it goes through reading system configs, I always get yellow symbol checking network environment. I'm not sure how to have a checkmark to it as I would like to be able to port forward my website through synology web server.
I'm a little confused about the security. If I open port xyz and tell it to forward to my windows 11 pc, and immediately close the port when I'm done using it, how secure or insecure is that? Does port forwarding only grant outside traffic to specific software?
so if i am getting a second synology with a different ip address, i need to assign it another port than the existing nas with 5000. what would i use for that 2nd synology
You need to start to add IPV6 to this, no port forward need it al all, you just go directly to the IPV6 adress of the NAS, obvious you still need to open the corresponded ports on the firewall but you have to do this also in IPV4, the big advantage is that on IPV6 there is no NAT so obvious no port forward, much more simple the setup. IPV4 is starting to get obsolete fast, just look at the google stats. thanks for the video.
@@ystebadvonschlegel3295 IPV6 is already now 50% of the internet traffic, will surpass by far IPV4 this year for the first time in history, everyone will get it, is only a matter of time.
I think I still don't understand the difference between forwarding to a device and a service. If I have two computers on the web and they're both using port 80. Why doesn't the router get confused?
This goes back to the example (12:23) of adding a 2nd Synology. They are each using port 5000, but the router will look at the incoming port and send port 5000 to the first Synology and for 5100 to the other. Also, I think you might be confused about the two computers on the web using the port 80. If you were running Web servers on both of those computers, then you would need the port forwarding to go to the correct computer. But if you are browsing the web from those computers, it falls back to the router knowing which computer sent the request and sending the replies back to that one. Hope that helps!
Hey there, I have a Synology NAS, on local network I am getting a speed of 700-900mbps...My internet plan is 200mbps...When I access my NAS via DSM through port forwarding I am topping only upto 10-20mbps...Can anyone help?
The speed you get when you access your NAS remotely, will be your ISP upload speed. I assume this is the 10-20mbps. You're not going to get your ISP download speed when connecting remotely, VPN, file transfer, media etc.
Both my up and down is 20pmbps..For example If I download or upload any files to google drive or any other service except Synology, I'm getting 200mbps
@@noelk6990 Maybe I don't understand your question. Are you connecting to your NAS remotely, and then doing a speed test? So your speed test is running through your NAS via a VPN?
![Eminem - Fuel (feat. JID) [Official Lyric Video]](http://i.ytimg.com/vi/t5H_CewqpKA/mqdefault.jpg)
You saved my life, I've been trying to do this for the last year and there wasn't a single tutorial as clear and simple as this one. THANK YOU SO SO SO MUCH
I have watched 10 videos over port forwarding & was sceptical to watch your near half an hr video. But really your way to explain is most elucid and understandable.
Thanks to finish my spree to watch videos to understand the subject.
Keep making more. & Keep it pure.
i just discovered your channel randomly and I love it........ very informative and easy to follow and understand ,,,,,, you are the best
Awesome, thank you!
I love the facial expressions when covering UPNP. Tells the whole story right there. Great video
man! youre a g i love how you talk super clear and concise without sounding slow and dumb lol really good job youre doing and actually helping folks
It takes deep understanding to explain complex topics in simple terms.
Man I love how you explain tech on a lower simple level that even a person not in the IT space can understand. Couldn't help but paused the vid and rushed to smash that subscribe button. 😁
Bravo! Super clear explanations that lifted the fog for a noob on what ports are, port forwarding, and particularly, port forwarding in a double NAT setup. Suggestion: Perhaps enable 2-factor authentication on the NAS to enhance security?
Very nice explanation. One thing I'd like to point is that traffic always hits a router upstream, which likely hits another router and so on, not only when CGNAT is deployed. The difference is that the typical ISP router does not implement NAT.
Excellent video. I work in I.T. and you really take the time to explain it well.
Really helpful again!! Your explanation of what to do with a router behind a router really saved me when I was setting up a VPN and couldn't get the routers forwarded correctly. Great job!! Also, for the first time think I almost understand port forwarding---almost :)
Very helpful video! For your international audience it would be very helpful though to also explain how it works when your ISP does not provide you with a fixed IP address, but a dynamic IP address like most European countries do. It would be great if you could add that.
Man you helped me so much with my home NAS. I appreciate your dedication.
I think this is a very clear and informative explanation of port forwarding. I will watch this whole video later.
This was very helpful, thank you. You explained everything really well and I have already disabled UPnP because of it. I want to port forward using my Plex on my Synology NAS. Any way you can make a short video about that? I realize you are very busy, but I think that would be helpful. Thank you for all that you do. I have watched most of you videos at this point!
It takes allot for me to sub to someone but you earned it brother
I just watched your video and it gave me a better understanding of simple port forwarding on a single device. Your example Synology DMS was set to use Port 5001 (Https) which works great where I can set my router to port forward port 5001 the IP address of my Synology. Next I added a Lets Encrypt certificate which requires ports 80 and 443 to be open to renew the certificate, so I port forwarded both ports 80 and 443 to the same IP address.
The problem comes in when I add a second and third Synology both requiring a lets encrypt certificate. I can change the DMS Port to something other than 5001 (Https), however, how do I port forward ports 80 and 443 to different ip addresses?
I wish there were tutorials on configuring multiple Synologys.
It is very well explained video. Thanks for explaining in such simple terms.
I have been searching on the internet for understanding how to implement the same in ipv6 networks. It is quite confusing to configure, as it is said the ipv6 does not require port forwarding. All devices on ipv6 can talk to internet directly. In such a scenario, how do one exactly secure the ipv6 network. Can we still resort to port forwarding in ipv6? These are some of the questions I am looking answers for.
Very well explained. I was still left with a few questions:
1. So any port can be used? You said this a few times but I’ve never been sure if there are some ports to avoid or what happens if two services use the same port? Are there best practices in choosing ports?
2. My crappy ISP router doesn’t have a pass through mode. I wasn’t please discovering this after receiving my new Synology RT6600ax router and could only set it up as a wifi hot point. Eventually I realized that I could set up a DMZ on the ISP and connect the Synology router that way. I haven’t had problems but can you see inherent risks doing this?
Great video, but I have a different problem. I hope you do a video on how to find and remove port forwarding from your router. My grandson put port forwarding on my night hawk router. Now that he's gone I don't know how to find the port (s) he opened and remove them! Thanks for any help you can give.
Thank you for the amazing, clear, and comprehensive content.
Using port forwarding is sooooo much faster than using the quick connect server!
Thanks Will.
Could you do a video of how to deal with certificates, how to deal with the problems that is occuring all thetime when connections are lost / re-login is required to the NAS due to changed cert. Perhaps tutorial on how to make a self signed cert (if that is the solution).
Thanks for the detailed info regarding port forwarding. Can you please let me know how to open port in XG-100NE router? Appreciate for your help!
Sounds like I'll have to do some digging to find out which ports what services use.
I want to try and create a more secure network at my house
Finally, I have been waiting for this for a long time 😍!!!
Like Jim Carey Pet Detective vibe. Excellent video.
Thanks, that was a very interesting and helpful video. I had heard of port forwarding but didn't know the details. Very well explained 😊
Loved the way you presented, I t was easy to catch any way thank you for the information
all clear! very helpful explanation
This is helpful i was actually able to setup Ark Survival Ascended on mu Synology with this. Had to figure out which ip do i forward the Synology or the vm that is using a 10GB Nic. It was the VM thst needed outaide access 👍
Nice video loved it and really helpful. I am trying to port forward my NAS via smb but how do I make it secure. Auto lock? Extremely difficult passwords?
Reminds me of a very young Brad Pitt. Hey, thanks for the awesome tutorial.
Hello! I’m so glad I found your channel, this one is the best on NAS topics! I have a strange problem with my newly bought ds923+. It does have access to other devices on my LAN. I can mount remote folder to my old ds213j also could host a reverse proxy on is and point to my old NAS. However I can do all the on my old NAS: I can mount remote folder to my new NAS and host a reverse proxy on it and point to my new NAS. Old NAS is on dsm 6.2, new one is on 7.2. Any help would be much appreciated as Synology support and their forum was of no help(
Many thanks for this great explanation
Wow. I just 'got' CG NAT. Thanks.
How about port 16881 for download station on the NAS?
port forward this ✊
Very informative! Thank you for sharing.
This video is amazing... Thank you so much ^^
Thanks I find it very useful. I have another scenario and would like your advice. I have a dual routers network. Router 1 TP link Ax 55 connected to internet and router 2 Asus AC87U lan to lan to router 1. I have TP link enabled with pptp and openvpn server. I have attached an USB drive to Asus router (2nd router). When I am on home network (either on wifi of TP Link or Asus), I can access Asus USB drive. But when I am outside the network, I used VPN back to TP Link, I cannot access Asus USB drive. Is there a way to config the routers to make it work. I researched a lot about this, some say using port forwarding and lan route, but I have no luck with any of these. Please advise, thanks in advance.
Thank you for explaining what port forwarding is. I have a problem with my Xbox series X and some people recommend to do a port forwarding.
I have a double Nat detected and is moderate I tried almost everything but cant get it to fix. I have a TP link router and cant find the Nat configuration to set it open. Any ideas will be appreciate
Do you offer your clients a DSM-access via Internet? What would be a more secure solution? Personally I use VPN, but a quick access for a customer via DSM-Acount would be cool also, e.g. for sharing stuff.
HI SpaceRex Can I ask for a guide on setting my ISP Modem to Pass Through Mode really appreciate your feedback thank you
Thank you for a simple video to explain port forwarding. No need for flashy slides and music. Thank you for that.
Can I pay you to help me setup my 10 ports for a gaming server?
Also what about the firewall? I’m trying to open 10 gaming servers for Ark survival evolved for my friends to join me. Ark wiki under dedicated server has all the info there for porting. I just get so confused. I’ll Pay You straight through RUclips by tipping. I really just need help.
WOW...super clear...thanks man
Port Forwarding is an issue on some ISP's routers. My router does not let me access Port Forwarding. I considered a new ISP but discovered that their didn't allow it either. Is this a growing problem?
I am a little confused because my Synology NAS has common forwards (e.g. 5001) and when I use the Synology control panel, it is updating the forwards on my router with uPnP. Once that is done, should I disable the uPnP on my router so that other NetworkOfThings does not open more ports? My router only shows me forwards that match my Synology right now.
You can’t use UPNP to setup ports then shut it off. The ports that were setup will just be closed. It’s either on, or it’s off. And hopefully it’s OFF!
Hello, I have a complex problem. In EU we're out of ipv4 on isps routers, they're are ipv6 only and does not work like bridge (passthrough). Is there any way to port forward? Do you have any idea how to do it this way? I heard something about DMZ. I have RT6600AX for home network and DS723+.
Interesting video, thank you. I have the use case that my parents (living somewhat elsewhere) want to connect to my Synology NAS Photos. I wonder what is more secure: Setting up a port forwarding with "connect from specific IP" or letting my parents connect via VPN to my router first. In the latter case they would have access to my network and considering that their PC might be virus-infacted or else, perhals a single fowarding rule might be more secure. What do you recommend?
@@attackhelicopter-up3dh its an Asus AC68u so pretty decent; not pro but good enough I would say.
Great explaination!
Just to clarify, port forwarding is done on the router-level? My Synology is allowed to have ports “open” for all its services, but those are not open to the internet unless the router was setup to forward the port? I’m running OpenVPN on my Synology and that’s the only port I have forwarded on my router so I’m good right?
That's correct. Open VPN is continuously being patched for vulnerabilities. Many devices that open ports on your router have stopped receiving updates or still use default passwords.
@@RBzee112 Thanks!
Good explanation of port forwarding, but most home users' routers receive dynamic IP addresses from their ISPs. Routers also assign internal IP addresses dynamically, so unless someone knows enough to work around this, the port forwarding will only work until the public IP address or the internal IP address of the target device changes. That's probably a good thing, because it's really not a good idea to set up port forwarding unless you have need for a specific service that requires it and you know how to make sure that service has robust security set up. There are safer ways to access data on the NAS remotely. Personally, I prefer to set up VPNs for this.
So thats where DDNS comes in. DDNS basically is a web address that points to a public IP address. And it's setup to update every 5 min or so. So when your public IP changes, so does your DDNS
@@SpaceRexWill, yes, I've used that before, but I'm blanking on why I used it. Might've been a case where I needed to set up a remote access VPN into a temporary site with a double NAT router situation. My main point was that a great topic for a follow-up video would be examples of when it's safe and appropriate to use port forwarding in the context of a NAS. In general, I avoid using simple port forwarding to facilitate remote access due to the security reasons that you hinted at in this video.
Thanks I get my webserver working as result of this fine video :-) But I cant connect using FTP and Filezilla using port 21 I hav forwarded on the router. I get the error "ECONNREFUSED" connection rejected by server. What can It be ?
your ISP may block port 21 upstream
You said you were gong to 'touch' on CGNAT... did I miss?
I use Tailscale to get around cgnat
I have a question. On my synology nas whenever I set up router and it goes through reading system configs, I always get yellow symbol checking network environment. I'm not sure how to have a checkmark to it as I would like to be able to port forward my website through synology web server.
Thanks for sharing
I'm a little confused about the security. If I open port xyz and tell it to forward to my windows 11 pc, and immediately close the port when I'm done using it, how secure or insecure is that?
Does port forwarding only grant outside traffic to specific software?
so if i am getting a second synology with a different ip address, i need to assign it another port than the existing nas with 5000. what would i use for that 2nd synology
I followed your instructions but Chrome is still reporting unsecure site. Certificates should be updated as well. How can I get HTTPS?
You need to start to add IPV6 to this, no port forward need it al all, you just go directly to the IPV6 adress of the NAS, obvious you still need to open the corresponded ports on the firewall but you have to do this also in IPV4, the big advantage is that on IPV6 there is no NAT so obvious no port forward, much more simple the setup. IPV4 is starting to get obsolete fast, just look at the google stats. thanks for the video.
Yah if any of us could actually GET an IPV6 compliant ISP (Frontier, looking at you!) this might be a thing….
@@ystebadvonschlegel3295 IPV6 is already now 50% of the internet traffic, will surpass by far IPV4 this year for the first time in history, everyone will get it, is only a matter of time.
Well done!
I think I still don't understand the difference between forwarding to a device and a service. If I have two computers on the web and they're both using port 80. Why doesn't the router get confused?
Cause they have different ip addresses?
This goes back to the example (12:23) of adding a 2nd Synology. They are each using port 5000, but the router will look at the incoming port and send port 5000 to the first Synology and for 5100 to the other.
Also, I think you might be confused about the two computers on the web using the port 80. If you were running Web servers on both of those computers, then you would need the port forwarding to go to the correct computer. But if you are browsing the web from those computers, it falls back to the router knowing which computer sent the request and sending the replies back to that one.
Hope that helps!
And if you cannot access your ISP router how can you set it to Pass Remote or forward and ports?
You may be able to use UnPNP. But otherwise you are out of luck
Thanks
Excelllent !!!!!
Super Like Like Like!!!
Hey there, I have a Synology NAS, on local network I am getting a speed of 700-900mbps...My internet plan is 200mbps...When I access my NAS via DSM through port forwarding I am topping only upto 10-20mbps...Can anyone help?
The speed you get when you access your NAS remotely, will be your ISP upload speed. I assume this is the 10-20mbps. You're not going to get your ISP download speed when connecting remotely, VPN, file transfer, media etc.
Both my up and down is 20pmbps..For example If I download or upload any files to google drive or any other service except Synology, I'm getting 200mbps
@@noelk6990 Maybe I don't understand your question. Are you connecting to your NAS remotely, and then doing a speed test? So your speed test is running through your NAS via a VPN?
are you not using a reverse proxy? why the hell do you have so many ports open lol
Haha most of them are disabled and I leave them for history.
Then a lot of them are mapped to my clients WAN statics to allow monitoring/ backups
I need Nat A on my nin switch
would a minecraft server be safe?
Word of the day: unsecure
Such a good explanation. Thank you very much, @spacerex
i thought the router was a cup with IP -.-
I have private address instead of public because of myficonnect but it's worth it unlimited data while att limits to 1 tb
Use dlink router for robot check
I made login for router port 666 so i can use port 80 as website on pc
This is useless
Thank you for the clear explanation 👍🏻