General rules for firewall

[Mikol1011]

Hey guys, so I'm pretty sure my terramaster nas was hacked about a week ago, as I saw similar symptoms to this post that reported the kinsing malware viewtopic.php?f=71&t=1300, and I also noticed that a foreign IP had "logged out" 3 times in a row in my http logs even though I have not forwarded the port to make it accessible outside of my network (similar to what some people observed with the eCh0raix ransomware).

I did a clean wipe, updated to 4.2 (since my NAS was still on 4.1.32 when it got hacked), changed the default ports, but I want to make sure this doesn't happen again.

What are some recommended rules you would set for the firewall to ensure that my NAS is ONLY accessible on my own local network and block all internet access?
As I stupidly set a rule at first and then blocked myself from accessing the nas ahaha...

Also, although I'm currently not interested in using it for anything besides backup and media storage, if I wanted to access my NAS in the future from a remote location, what would be a different firewall rule to enable to allow me to do that securely?

Thank you guys in advance!

[RyanYang]

Hello,
You can set up firewall rules that allow a single IP for your TNAS. If you set up in the local area network to allow only your own computer to log in but you can't access it one day, maybe your computer's IP address has changed. You need to change the computer's IP to the original IP to access. When you want to use other public network access, you need to increase the firewall's allowable rules.