![]() To avoid avoid the necessity to run as root, you should use an alternative port for the NxFilter admin GUI as well as the DNS service. Log into the created NxFilter account, upload and unzip the binaries in to the home folder.There is no need to add any further access (not even for the FileStation), as this account is only used as a convenient, local container for the NxFilter files. Name the user “NxFilter” and keep it the “users” System default group. I suggest to create and use a specific local user account for the NxFilter installation on your Synology NAS to keep things separated.Get the latest NxFilter binaires as ZIP file from their website (nxfilter-v.v.v-p1.zip). Since I will later use port redirection for DNS, I use port 8053 instead of the default 53. In the below example I allow all local traffic to the alternative DNS Port 8053 (UDP) as well as the administration GUI port 8443 (TCP).įirewall rules for DNS, using alternative ports. Add firewall rules in Control Panel / Security / Firewall. You must open a port for DNS and one for the admin GUI.Enable SSH in Control Panel / Terminal & SNMP / Terminal.Install Java, version 1.7.0, using the Java Manager Package in the Package Center of you Synology NAS. ![]() Log into your Synology NAS admin GUI as administrator.Use an upstream DNS server, also for queries originating from within the NAS.Use UpStart jobs to start up NxFilter automatically after boot.Modify the Synology firewall to accept traffic for DNS and the NxFilter admin GUI.Add kernel modules for port redirection from Port 53 to a non-privileged port, to avoid running the DNS server as root.(at least temporarily) enable SSH on your NAS.However, to make it safe (that is, not running it as root) was a little more involved as I thought… You will need to… Thus I decided to go down the native way with the Java Manager module. Unfortunately it is not able to run Docker containers. The DS115j is one of the more affordable models, running Version 5 of the Synology DiskStation Manager (DSM). Please note *Raspberry Pi is a trademark of the Raspberry Pi Foundation.To free up my other Raspberry Pi from being a DNS server and to use an already existing NAS on my local LAN, I decided to try to install NxFilter (my favourite DNS filtering solution) to a Synology DS115j NAS device. We will be releasing new Howtos and tutorials soon with Videos relating to each one soon after. If you like it please consider going to our Youtube page and hit like, share and if you find our content helpful please consider subscribing. Thank you for reading, we will release new content every couple of days. NXFilter is basically much more robust than Pi-Hole and enterprise ready, but can be used for homes, schools etc etc. It is free for commercial use as well, according to the website. Under the lists section, the system can be licensed, but if 20 users or less, when it expires, it is fully functional for up to 20 users for free. Please note the recommended minimum is 768m. Hint: Run below in Terminal/CLI if there are any locale warnings / issues, this is just a temp locale “fix”. java 4Stack=true -Xmx512m on Pi Zero W: STILL TESTING!! java 4Stack=true -Xmx384m java 4Stack=true -Xmx1536m on Pi3 / Pi4 1GB: you can also set this to 512 or just leave as is, it is stable as is. java 4Stack=true -Xmx2048m on Pi3 / Pi4 2GB: you can also set this to 1024 or 1536, or just leave as is. Notes: Change the java memory limit to match your requirements: default is: -Xmx768m example: nano -w /nxfilter/bin/startup.sh now find and edit, there should be two instances, edit both: java 4Stack=true -Xmx768m to: on Pi4 4GB: you can also set this to 1024, 1536, 3072 or just leave as i s. Now wait up-to 5 minutes for the engine to start… (on Pi Zero W…wait a bit longer for first start) then browse to: (self signed certificate) login default: admin/admin sudo systemctl enable nxfilter sudo systemctl start nxfilter Sudo apt-get install openjdk-8-jre cd /tmp wget sudo dpkg -i nxfilter-4.3.4.8.deb #set your memory here as per the Notes section first…then continue. Sudo apt-get update & sudo apt-get upgrade sudo reboot Raspbian Lite installed using NOOBS 3.2 lite, after initial setup, run ‘raspi-config’, and set, boot from CLI no auto login, enable SSH, set Memory Split to 16 (this is the amount of memory you are assigning to the GPU, 16mb is the lowest limit), and set static IP, reboot. NxFilter is a free Content filter and DNS server, that allows you to control and monitor access to DNS and restrict access to various types content by catagories. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |