Posts: 1,171
Threads: 1,172
Joined: Feb 2020
Reputation:
1
Hi there,
I recently got a good deal on a Terramaster F4-423 - my first NAS!
To prepare, I (re-)watched your guides from earlier this year, where you mentioned that if the NAS is connected to the router, it automatically has internet access.
Since I solely want to use this NAS as an offline file server for backups, storage, and hosting movie files for my Zidoo Player, I don’t need internet access. However, I don’t have a network switch either.
I did some research, but as a beginner, I’ve found it difficult to find whether it’s possible to block internet access directly from the NAS itself. Terramaster’s security guides mention various precautions, but I couldn’t find any information about fully disabling internet access while still connecting the NAS to the router.
I thought I’d give it a shot and reach out and ask you. Do you have any tips or know of a guide that could help me achieve this?
Any advice or pointers would be greatly appreciated!
Thanks in advance!
Cheers,
Hans
Posts: 1
Threads: 0
Joined: Dec 2024
Reputation:
0
There are a few ways to block internet access on your NAS, even though it’s connected to the router, and I’ll guide you through some of the options. While there isn't a direct toggle in the Terramaster settings for disabling internet access, you can achieve it through a few different methods. Here are some approaches:
1. Use Router Firewall Rules (Best Option)
The easiest and most effective way to prevent your NAS from accessing the internet is through the router's firewall. Most modern routers have an option to create custom firewall rules or access control lists (ACLs) to block internet access for specific devices on your network.
Steps:
Log into your router’s admin panel: Typically, you can access this by entering the router's IP address (like 192.168.1.1 or 192.168.0.1) into a web browser.
Find the firewall or access control section: This will vary depending on the router's brand and firmware, but you should look for a section called “Firewall,” “Access Control,” or “Parental Controls.”
Add a rule to block internet access for your NAS: If your router supports it, you can create a rule that blocks all outbound traffic from the NAS device to the internet while still allowing local network traffic (LAN). You might need the IP address or MAC address of your NAS, which can be found in the NAS network settings or your router’s device list.
Apply and save the settings: This will ensure your NAS can still access other devices on your local network but will not be able to reach the internet.
Note: Make sure you test that local access works (e.g., accessing files from your Zidoo Player) while internet access is blocked.
2. Disable DNS Settings on the NAS
Another way to block internet access is to manually configure the DNS settings on the NAS to prevent it from resolving any external domain names (like google.com, etc.).
Steps:
Log into your NAS: Access your Terramaster NAS's web interface.
Go to Network Settings: Look for the network or internet settings section.
Set DNS to an invalid address: In the DNS settings, you can specify an invalid or internal DNS server (like 127.0.0.1), which will prevent the NAS from being able to resolve any external addresses. This will effectively block any internet-based services, even though the NAS is still connected to the router.
Save the changes: This should restrict the NAS from using the internet.
Limitations: Some apps or services on the NAS may still try to reach the internet via direct IP connections, even without DNS, but most NAS functions (like file sharing) will remain unaffected.
3. Use a Static IP and Limit Gateway Access
You can also assign a static IP to your NAS and disable the default gateway or internet routing from within your NAS settings.
Steps:
Assign a static IP: Set a static IP for your NAS through its network settings. This ensures your NAS will always have the same IP address on your local network.
Remove or leave empty the default gateway: In the network settings, you’ll typically see an option for the default gateway. This is the router's IP that provides internet access. By leaving this field blank or removing it, your NAS won’t have a route to the internet, even though it’s connected to the router.
Save and test: The NAS should be able to connect to other devices on your local network but will be isolated from the internet.
4. Physical Network Isolation
If you don’t have a network switch, another simple approach is to physically isolate your NAS from the router's internet connection. This could mean using a secondary router that’s not connected to the internet or simply connecting the NAS to a local-only network (for example, using a direct Ethernet connection to your Zidoo Player and ensuring no internet access from the main router).
