therealpure
Dabbler
- Joined
- Jan 6, 2014
- Messages
- 41
Hey all,
I have a freenas box setup with a HP Server. It has 2 x 2tb drives in it setup with ZFS.
I run FTP, Plex, CP, SB, Sab on it. I have a DynDNS setup through noip so I can access if over the web.
I can back home the yesterday and a load of my files were gone. I mean totally gone, searched everywhere. I now suspect that the files have been deleted by someone accessing my server. I looked back in the logs that show the % of storage used and I can see around 2pm on Thurs this week the space on the drive started increasing (I assume when the files were getting deleted!). I a bit freaked out by this intrusion!
I believe I can't recover the files as I haven't set a ZFS snapshot. I do some of the files backup else where but have lost a ton of movies.
What can I do ?? Should I have a firewall setup or how can I ensure access is truly controlled. There is only one user I have made on the freenas. I have now changed the passwords of both this user and root. I also have turned off DynDNS and FTP access for now while I try and secure the server.
I have a freenas box setup with a HP Server. It has 2 x 2tb drives in it setup with ZFS.
I run FTP, Plex, CP, SB, Sab on it. I have a DynDNS setup through noip so I can access if over the web.
I can back home the yesterday and a load of my files were gone. I mean totally gone, searched everywhere. I now suspect that the files have been deleted by someone accessing my server. I looked back in the logs that show the % of storage used and I can see around 2pm on Thurs this week the space on the drive started increasing (I assume when the files were getting deleted!). I a bit freaked out by this intrusion!
I believe I can't recover the files as I haven't set a ZFS snapshot. I do some of the files backup else where but have lost a ton of movies.
What can I do ?? Should I have a firewall setup or how can I ensure access is truly controlled. There is only one user I have made on the freenas. I have now changed the passwords of both this user and root. I also have turned off DynDNS and FTP access for now while I try and secure the server.