TerraMaster Forum

Hi,

my case is simple. I create an http share by using file manage, choosing a directory, right click and select share.

After entering the requested password, it creates an URL like :
http://192.168.2.2:8181/tos/index.php?s ... d=XxXxXxXx

Which works perfectly (see attached good one):


But then, I use a product called pound (https://www.apsis.ch/pound.html) to hide the IP and put some https.

which allow me to use an URL like:
https://ww.mydomain.com/tos/index.php?s ... d=XxXxXxXx

When I use this URL, I get the top directory displayed (after entering the password). But then, all sub-directories are empty. So, the connection to server is OK. The server sends the page and the top directory content (it contains only directories), but no files.
(see attached bad one)

What do I miss?

regards,
Christian

Hi are you using the link to access your TNAS within the LAN or from over the internet? And how did you get the certificate imported?

Hi,

Thank you for your fast answer, I am currently in Greece, so we probably have a 7 hours time difference.

For your information, I am quite good in linux server management, I maintain my own websites (not opened to public). So if you need some logs, just ask. I did some tcpdump, but did not see much which helps.

I try local or through internet, the same. There is no certificate to set up on the terramaster, the tool 'pound' converts https to http (and it has the certificates), changes the port from 443 to 8181 and generally manages things correctly. It's a very good tool to protect web servers and simplify management.

It is shown by the fact that I get the correct application and root directory, as shown.

I did not identify any other port to open. (8181). Is there any need to open ports on m firewall?

The problem may come of the session identifier when I try to update (click) a directory. Pound needs to know how to the application maintain session information. We have the following choices:
IP , One session per IP address
BASIC, Basic authent (in URL). I don't think so.
URL, Means URL contains a session ID, but I don't think so too.
PARM, an URI parameter? If yes, I would need the name
COOKIE, a cookie? If Yes, I need the name too
HEADER, a header parameter? If Yes, I need the name.

I think about this because, it is possible that pound does not send the second request on the same port which was used to open the first session (?) but I don't see errors on terramaster logs.

Also good to know, I use the three network interfaces. The too 1gb ones connects to internet, one directly, one indirectly. I tested both of them.

So, for now, I think that the session ID is my best choice to solve this problem.

regards,
Christian

As you know, the generated shared link is used to visit within the LAN. And when you want to access from over the internet, something have to be changed. The Remote Access on TOS desktop should be enabled. And then change the IP Address in the shared link to TNAS ID.tnas.link
Before: http://192.168.0.110:8181/tos/index.php ... d=XrlbEIan
After: http://TNASID.tnas.link/tos/index.php?s ... d=XrlbEIan
Such as: http://tnas22.tnas.link/tos/index.php?s ... d=yVzOtMkc
Also we never used pound before, we may have to test it here.

Hi,

that's exactly what I don't want. My network does not allow this.

If the system works locally, it should work the same remotelly (charge to the user to manage the security).

The fact is that it nearly works. I just think that it is a port opening (probably not) or a session problem.

I am afraid that I will have to reverse engineer the communication to find what.

Thank you.

Christian

Hi,

I updated to last version yesterday, and now, nothing works...

So, looks like a bug or a user's right problem.

Can you suggest a way to test?

Thank you,

Christian

What's the current TOS version now, 4.1.23? And neither generated link nor hiden IP link would work?

Hi,

I have a F5-422, last proposed version online is 4.1.21-2003031748.

Where could I have the real last one?

regards,
Christian

Hi, do you want to reinstall your TOS to the former version?

If you have a newer version, I can test it... Do you have a link?

Anyway, the old one did not work correctly too, so...

And thank you, first time I meet such a good support.

Christian