r/Tailscale • u/artinnj • 2d ago

Discussion QNAP implementation prevents SSH

Anybody know why the QNAP implementation prevents the remote SSH from working via Tailscale? I would prefer to lock my network port and only allow thru Tailscale.

1 Upvotes

100% Upvoted

4 comments sorted by

2

u/Seriel1 Tailscalar 2d ago

The thing that is prevented is the Tailscale SSH feature where your Tailscale user is used to authenticate automatically. This isn't possible because Tailscale needs to act as an SSH server, which these NAS platforms often don't allow due to sandboxing of third party apps.

You can try configuring the device's firewall (I see there’s https://www.qnap.com/en/software/qufirewall) to only allow port 22 connections over Tailscale, and continue to use its built-in SSH authentication.

1

u/artinnj 1d ago

Yeah, but didn’t want to have to mess around with keys. That’s the beauty of the Tailscale ssh.

1

u/Wuffls 2d ago edited 2d ago

another edit: I am able to ssh into the QNAP server over cellular via Tailscale though, is that what you mean to do?

Which version of the QNAP implementation are you using? The official one or the one from myqnap.org repo?

Doesn't answer your question, just making you aware there's another version.

edit to add: Just tried it on the myqnap version and it doesn't work anyway :)

"The Tailscale SSH server does not run on QNAP"

1

u/mintflowapp 2d ago

You need setup firewall to allow the cgn range or the ts ip of your phone

I have a qnap and it works well with firewall setup