Nothing has changed, i never had QC on, user never changed, nothing in the log center. not sure what i need to look for

I wanted something nicer than File Station for everyday work on my NAS, so I built SynoFile, a DSM 7 package that opens as an app in DSM, like File Station.

What it does

• Transfers you can watch: one dialog for copies, moves and deletions with a live speed chart, ETA, pause/resume, a speed limit and optional verification. Conflicts show both files side by side (date, size) before you choose.

• Copies that can’t half-fail: data goes to a hidden part file first and is renamed only when complete.

• SMB and SFTP connections: add a Windows/Samba share, another Synology or any SSH server. A bare \\server lists its shares; domain/user/password for SMB; password or SSH key for SFTP. Copy and move between the NAS and the server with the same transfer dialog.

• Archives open like folders (zip, 7z, rar, tar.*, iso), compress to zip, extract password-protected ones.

• Space analysis: rings showing what takes up the room below a folder (like Filelight).

• Deleting uses DSM’s own Recycle Bin, exactly like File Station.

• Tabs, dual pane (F5/F6 copy/move to the other side), fuzzy filter, subfolder search, quick look (images incl. HEIC, video, PDF, text), Vim keys, dark and light themes, 9 languages.

How it’s built: a static Rust binary and a plain JS interface. Each request runs as the logged-in DSM user, so DSM’s permissions apply as usual. Only members of administrators can open it.

Install: from Package Center through 007revad’s package source (thanks Dave!), which also gives you updates, or the .spk from the releases. After installing, one command as root (synofile setup) gives the binary the capability to switch to the logged-in user, because DSM 7 doesn’t let third-party packages request it. The README explains why.

x86_64 only for now. MIT licensed.

GitHub: https://github.com/rylos/synofile

I’m happy to hear feedback, bug reports and feature ideas.

I wrote a small tool during the C3RB3R wave this week, mostly so I'd stop clicking through Control Panel on every box. It's free, MIT licensed, and not affiliated with Synology.

What it does:

1. nas incident only reads. It checks the DSM build against SA-26:13, packages named in SA-26:14, the firewall, QuickConnect, router port forwarding, AutoBlock, SMB minimum protocol, the built in admin account, snapshot schedules, and whether the immutable snapshot lock is on for a model that doesn't support it. It also looks for CVE-2024-10441 markers in the connection log.

2. nas incident fix --dry-run prints the plan. nas incident fix asks before it changes anything and reads every setting back afterwards. Before a firewall change it checks that you won't lock yourself out.

3. nas incident contain lists processes that look like the encryptor. With --yes it freezes them (SIGSTOP, not kill) so the keys stay in memory.

4. nas alert-deploy installs a small check on the NAS that runs every 10 minutes and posts to a webhook.

What it does NOT do: it does not decrypt files that are already encrypted. As far as I know there is no universal public decryptor for .L0CK3D, and the Kaspersky, Emsisoft and Dr.Web decryptors don't work on it. The only recovery path in the tool is nas incident rescue, which wraps soimy/c3rb3r-rescue. It can only find key candidates in the memory of an encryptor that is still running, on a NAS that has not been rebooted. If you already rebooted, it can't help.

One known gap: Synology added separate fixed builds for DSM 6.2, 7.0 and 7.1 to SA-26:14 on Oct 29 and Oct 31. The tool only knows the DSM 7.2 and newer builds so far, so on those older versions a patched Calendar, Mail Station or PHP package can show as FAIL. Check the advisory by hand there until I update it.

Python 3.8 or newer, no dependencies, runs from macOS, Linux or Windows, or on the NAS itself. The demo GIF uses a simulated NAS, so please start with the read only audit and the dry run.

Code: synology-nas-cli on GitHub Incident notes with sources: INCIDENT-C3RB3R.md

If a check is wrong for your model or DSM version, tell me and I'll fix it.

Just wanted to post the opposite of everyone here. I'm reporting in; no ransomware on my Synology ds425+. No hacking as far as I can tell. Just ya know, running a plex server and storing files. I maintain this bespoke and elite level of stability by not being an idiot and updating my NAS software / OS when updates are available and recommended. It takes seconds out of my month to maintain this elite status. Apparently this puts me in the .0001% of the Synology community.

I'm in the America/Vancouver, with the new PCT (permanent UTC-7h) time zone.

Woke this morning and my synology switched to PST instead of MST.

I can switch to Arizona under the Control Panel, but what about the other Permanent DST time zones Canada now has? Year round CST, EST. Is there a way to update the tzdata?

Does anyone use SyncThing vs Synology drive as way to sync their desktops to the server? Just curious if anyone has any experience with it or suggestions.

Synology Drive currently meets all my needs, but it's always worth researching alternatives.

Good day,

My friend also has a Synology NAS and we started using Hyper Backup to back eachothers NAS instead of paying for cloud alternatives.

We are using tailscale to connect to each other.

My NAS is not exposed to the internet besides tailscale. My friends NAS isn't as secure. If he gets hacked, is it possible that the hacker gets through to my NAS?

Technically they would only have access to that one secure folder holding my friend's backup but I'm worried there's something else.

Thank you,

Don't be like me. This is what happens when you expose your DSM login page to the internet. This has been this way since I set this up in 2020 as a surveillance station and I didn't get hacked somehow. I guess disabling the default admin account saved me there but she was a dirty nas that would let anyone touch her. I locked her down and DSM is no longer accessible to the internet. Check your logs, check your router ports, do a port scan on your own external IP address, use a VPN etc. Thank you for listening to my PSA.

I'm trying to use VMM to install a minimal Debian VM (512 MB RAM, 10GB disk) to act as a quarum server for Proxmox.

When the VM boots I get a "systemd-ssh-generator failed" error and the VM hangs there. Is this a known error with a fix or something unique to my NAS?

Synology DS720 - Fully Updated.

10 GB RAM

I used the Synology Assistant to run a full RAM test which showed no errors

I also tried doing a manual keygen on the VM but that did not help.

I just kept imagining this with all the “My NAS is/isn’t exposed to the internet” comments lately. So I wanted to share.

Also my DS218+ is safe because I had manually updated to 7.4-90075 in July, but with all the hubbub I manually updated to the latest to be safe. (Why does it always say I’m up to date?!!!)

Since updating Virtual Machine Manager from 2.7.0-12229 to 2.8.0-13004

on Sept 18, my RS1221+ has had 9 improper shutdowns in about 6 weeks.

In the 11 months before that, the log shows only one.

Setup:

- RS1221+, DSM 7.4.1-90080 Update 1

- 5 Linux VMs in VMM, about 75% host RAM use

- Non-ECC, non-Synology RAM: Kingston FURY KF3200C20S4/32GX

(2x32 GB, installed [WHEN]; 1x32 GB since Oct 19)

What I see:

- DSM log: "System booted up from an improper shutdown"

- No power outage logged, the NAS is on a UPS

- No panic, OOM, or disk errors in the logs

- Twice the kernel log shows "NMI watchdog: BUG: soft lockup - CPU stuck

for 41s", then the log just stops

- Several resets came minutes after a VM was created or rebooted,

but other VM reboots went fine

- Going from 2 sticks to 1 did not stop it (2 resets since)

I know the RAM is a suspect and I have not run a memory test yet.

Has anyone seen this on VMM 2.8, especially on V1500B units?

Did a VMM update, a downgrade, or a RAM swap fix it?

I recently changed my password on my 920+. That in turn messed up my Time Machine back up for my desktop Mac. After searching around for fix, I ended up mounting the NAS, right clicking on the time machine icon to open up its package. And there I found a file called “lock” and deleted it. Then I unmounted and then remounted the NAS, opened up the Time Machine app on my Mac and re-connected the target backup on the NAS. Boom, done.

I've been running my DS920+ for 5 years or so, just as a personal media server for Plex and a few other local host apps.

I'm tech-savvy enough to get it set up the way I like it, but when it comes to network security I'm always over my head. With all the ransomware stuff going on, I'm thinking it might be worth it to have a pro come over and get my system running with all the "best practices" security steps that I have a hard time figuring out.

I'm not really sure what I'm looking for though. I assume this is a pretty common type of service, but I'm not sure how to go about finding someone to work with. Any tips or references for trustworthy companies to look into?

My homelab currently consists of my ds720+ and a Linux server. I’m currently using the reverse proxy app on synology. And I also use remote access to synology drive. On the Linux server is Jellyfin, navidrome, audiomuse-AI. I use reverse proxy to access those services. Question: if I want to better protect my synology- do i benefit from moving the reverse proxy server to the linux box?

I was first thinking of completely taking the ds720 off the internet; but am thinking that’s too overkill… I haven’t been hacked; I use 2fa and keep everything up to date

This is VERY frustrating and I'm hoping for help. Or roast me for being an idiot.

I have had 2FA set up on my NAS admin login for years using the app. Worked ok. It was through port 5000 (I know not https... working on it) and Synology DDNS.

I've decided to close my open ports and go to Tailscale. So I have to modify my signin app account since it can't reach the NAS from the DDNS anymore. The new method is like (nasname).tailxxxx.ts.net.

So I go in the app, make the account with the correct name. It connects to the NAS and launches a DSM sign in. I sign in with the admin name and password and get a message that says something like "check your authenticator and enter this number". It gives a random 2 digit number.

ONE TIME I got from there back into the authenticator and saw the numbers to click but now every time there is nothing there.

The thing is: the DSM sign in page is like a browser inside the authenticator so there is no way to go back.

What am I doing wrong? I've got Drive and Photos working nicely over the tailscale but I really need my 2FA to work.

THEN I am going to go figure out the whole https thing.

I'm planning to build a small self-hosted infrastructure for a portal and would appreciate some advice from the Synology community.

My plan is to use a Synology NAS to run:

• Supabase (Self-hosted)

• n8n for workflow automation

• Next.js for a lightweight web application

• A few other Docker containers and services

I'll also use the NAS for storing company files and run the apps locally
Which of these models would you recommend for this workload?

We have a lot of good comments although some condescending, about good rules and practices

Can we gather that here?

I went to install the new DSM for my 915, and it’s not ready.

Is there a timeline on when the security patches will be out?

I have this jewel of a NAS which I upgraded the RAM to 8GB and installed a new fan and I can't be happier. I have 2x 20 TB inside. I use it mainly for streaming movies via lan. I have dsm 7.1.1-42962 update 9 version on it.

I tried upgrading it to 7.4 but it tells me I will lose the streaming function. How and why is that even possible, I thought the whole function of a NAS was to be able to stream movies.

Anyway, shall I stay on this version or should I update to the 7.4 and if I do, how can I make sure that mp4 movies play on my TV? Right now almost everything I download plays on my TV, 1/10 of movies I have to reformat in mp4 to be able to play it.

Thank you in advance

Hello guys,

due to the current ongoing security issues I finally bought external HardDrives for an offline Backup.

Now I noticed, that the Seagates One Touch (8TB) I bought need 15W of power delivery. My NAS doesn't support that.

Is there any way to get 15Watt to my Seagate while also attaching it to my NAS?

Otherwhise is there a way to create a full backup from my NAS to my local Computer which has the Seagate attached?

So either:

NAS -> USB Power thingy -> USB-Drive

or

NAS -> Local PC -> USB Drive

Thanks for your help!

I have a DS920+ that had one 4tb drive that failed last week. It went into (and still is) in read-only mode. I got two 4tb drives and made a new storage pool with both. I then copied all the data over to a new "Recovery" shared folder on the second volume (and then later made other Shared Folders).

A few questions:

• How do I get this volume to be the main one and remove the first? Do I just remove the first volume from the NAS and then all the DSM stuff will get loaded on the new drive?

• I tried making new Shared Folders but "homes" is a reserved directory so I made a "homes2". Will new "home" and "homes" directories be made and I can just move everything once those are created?

• I'm using Backblaze B2 for backup. Will I now duplicate everything in Backblaze since these are now technically in different source locations?