How to install a VPN server on NSA325-v2

Mijzelf

When everything works now there is not much point in upgrading to Debian. Theoretically you could get a more performant VPN (Wireguard is less CPU intensive than OpenVPN or 'SOCKS over ssh' (The latter 2 use the same encryption)), but as long as you only get 200kB/sec from the available 1MB/sec, there is some other bottle neck than the CPU.

Installation of Debian doesn't necessarily kill your data, but of course it's easy to do it by mistake. When you are really concerned about that, you should be aware that you should have a backup. Your NAS is not a magical box which keeps your data safe for eternity, but it's a piece of electronics with a mechanical disk, which will fail. some day.

Tomalamix

Hello all,

i have been using this SSH connection without any issues until a few days ago, I am getting this:

C:>ssh -D8080 xxxx@ssssssss.aaaaas.org
Unable to negotiate with xxx.ppp.ttt.ooo port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss

I didnt change my PC neither the NSA firmware. Is there anything I can do?

Mijzelf

You didn't change your PC, but apparently it got an update ssh client, which by default disables this old protocol. If the ssh client is OpenSSH (-compatible), you can tell it to shut up:

ssh -D8080 -oHostKeyAlgorithms=+ssh-rsa xxxx@ssssssss.aaaaas.org

Tomalamix

Well, you did it again, it worked.

I hate this windows thing that I cant turn off updates which I dont want and made without my consent, I feel that I do not own my own PC.

Tomalamix

I am experiencing problems again. and it is weird.

I am able to connect using the SSH (socks5 to browse the web) and SFTP (i can access my stuff there) but I stopped being able to connect via browser, the 8443 port. Dont understand why and now no one is at home to reboot it. The point of using the 8443 is to turn off the machine when I will not use it for a few days.

Is there a way to reboot it, turn it off or something like that using telnet or some other type of connection?

By the way I think telnet port is not working (23), I tried Putty (port 22 is occupied with the SFTP) to get in but no response. The weird part is that the server for the SSH is up, I can connect, so is the SFTP, I can access my stuff there without any trouble

Thanks for the support!

Mijzelf

Is there a way to reboot it, turn it off or something like that using telnet or some other type of connection?

Sure. As root you can execute the command 'poweroff' or 'reboot'. When you login as admin, you can execute 'su' to become root.

Telnet or ssh doesn't matter, here. You should be able to login using PuTTY, but your 'socks' login should also yield an open shell on the server.

Tomalamix

Hi Mijzelf!

Thank you again to give your inputs.

Yes, I tried the telnet and Putty, none work and I really dont remember if I changed the port for the telnet. About the SSH I used it and I was able to change from admin to root and do that reboot. great!

Regarding the telnet/putty connection , why I was not able to login then? on SSH telnet (putty) i receive an answer saying that the protocol is incorrect which I understand because port 22 is taken by the SFTP server.

I was able to login into the box and I see that the telnet port is disabled on the Firmware tweaks page, I was thinking that maybe this explains why I cant login using telnet but it is not because of this because I can now use Putty to telnet the box after the reboot. What I see is that both SFTP and telnet service are using the same port: 22. How can I change this? Maybe this is why I got problems before the reboot? Even the SSH maybe uses this port and screws up the other connections? I really dont know..

Mijzelf

You are running an ssh server on port 22. SFTP is a subfunction of ssh.

I can now use Putty to telnet the box after the reboot

Are you sure it's telnet? PuTTY can do ssh, telnet and serial connections. (And maybe more. It's some time ago I looked at PuTTY.)

Tomalamix

Mmm..i See..how can I understand which protocol is Putty using when I connect? dumb question, I know…

Mijzelf

As far as I remember there is some drop-down field on the main page where you can choose between ssh, telnet and serial.