[Discussion] TNAS F4 trying to connect to outside IP in security isolation mode
Posted: 11 Mar 2025, 03:33
Hey,
I've setup a Terramaster F4 for shared storage space in our home network. As it is just beeing used locally I had set it to security isolation mode, assuming that would completely stop it from trying to connect to anything on the internet (i.e. outside our local network - which is set to a private 192.168.x.x/24 network). During some maintenance on our switches I noticed when I'm logged in to the TNAS using its http interface it still tries to connect to two different IP addresses, one is 34.160.x.x and the other one is 23.128.x.x both on port 443 (https) - with actually quite a bit of traffic. I disabled isolation mode and ssh'ed into the TNAS to check which process is trying to connect to those servers using netstat - and it is the TOSDaemon - so apparently it is something built into TOS.
Currently I don't have any additional applications running on the TNAS. And it was new when I bought it about three months ago. Since then I've only updated it to the latest TOS Version (well actually not the latest I just ran the internal updater which kept it on TOS 5 and didn't update to TOS 6 - I hadn't found time to do that manually yet) and have had it running in isolation mode ever since.
Using whois reveals that one address belongs to UNIVO LLC and the other to Google (apparently in an address range used for google cloud customers).
Can anybody explain what those connections are for?
For now I just blocked the traffic on my firewall and haven't noticed anything not working. But as I had it running for quite a while not blocking that traffic I am curious what they are used for.
Thanks,
K
I've setup a Terramaster F4 for shared storage space in our home network. As it is just beeing used locally I had set it to security isolation mode, assuming that would completely stop it from trying to connect to anything on the internet (i.e. outside our local network - which is set to a private 192.168.x.x/24 network). During some maintenance on our switches I noticed when I'm logged in to the TNAS using its http interface it still tries to connect to two different IP addresses, one is 34.160.x.x and the other one is 23.128.x.x both on port 443 (https) - with actually quite a bit of traffic. I disabled isolation mode and ssh'ed into the TNAS to check which process is trying to connect to those servers using netstat - and it is the TOSDaemon - so apparently it is something built into TOS.
Currently I don't have any additional applications running on the TNAS. And it was new when I bought it about three months ago. Since then I've only updated it to the latest TOS Version (well actually not the latest I just ran the internal updater which kept it on TOS 5 and didn't update to TOS 6 - I hadn't found time to do that manually yet) and have had it running in isolation mode ever since.
Using whois reveals that one address belongs to UNIVO LLC and the other to Google (apparently in an address range used for google cloud customers).
Can anybody explain what those connections are for?
For now I just blocked the traffic on my firewall and haven't noticed anything not working. But as I had it running for quite a while not blocking that traffic I am curious what they are used for.
Thanks,
K