Initial commit: combine nas_tool, nas_webdav, sync-utils

2026-02-18 22:59:43 +08:00
commit 526c6a5521
77 changed files with 7898 additions and 0 deletions
@@ -0,0 +1,164 @@
+# WebDAV External Access Troubleshooting Guide
+
+## Problem
+WebDAV works on intranet but fails from external networks with "Connection refused" error.
+
+## Common Causes and Solutions
+
+### 1. Service Bound to Localhost Only
+
+**Symptom:** Service only listens on `127.0.0.1` or `::1` instead of all interfaces.
+
+**Solution:**
+- **Apache:** Change `Listen 127.0.0.1:5006` to `Listen 0.0.0.0:5006` or `Listen *:5006`
+- **Nginx:** Change `listen 127.0.0.1:5006;` to `listen 0.0.0.0:5006;` or `listen *:5006;`
+- **Other services:** Ensure binding to `0.0.0.0` or `*` instead of `localhost`/`127.0.0.1`
+
+**Check:**
+```bash
+netstat -tuln | grep 5006
+# or
+ss -tuln | grep 5006
+```
+
+If you see `127.0.0.1:5006` or `::1:5006`, the service is only accessible locally.
+
+### 2. Firewall Blocking Port 5006
+
+**Solution:**
+
+**UFW (Ubuntu/Debian):**
+```bash
+sudo ufw allow 5006/tcp
+sudo ufw reload
+```
+
+**firewalld (CentOS/RHEL):**
+```bash
+sudo firewall-cmd --permanent --add-port=5006/tcp
+sudo firewall-cmd --reload
+```
+
+**iptables:**
+```bash
+sudo iptables -A INPUT -p tcp --dport 5006 -j ACCEPT
+sudo iptables-save
+```
+
+### 3. Router Port Forwarding Not Configured
+
+**Solution:**
+1. Access your router's admin panel
+2. Navigate to Port Forwarding / Virtual Server settings
+3. Add rule:
+   - **External Port:** 5006
+   - **Internal IP:** Your NAS IP address (e.g., 192.168.1.100)
+   - **Internal Port:** 5006
+   - **Protocol:** TCP
+4. Save and apply changes
+
+### 4. Router Firewall Blocking Incoming Connections
+
+**Solution:**
+- Check router firewall settings
+- Ensure port 5006 is allowed for incoming connections
+- Some routers have separate WAN firewall rules
+
+### 5. ISP Blocking Port 5006
+
+**Solution:**
+- Some ISPs block certain ports
+- Try a different external port (e.g., 5007, 8080)
+- Update port forwarding to use the new port
+
+### 6. Service Not Running or Crashed
+
+**Check service status:**
+```bash
+# For systemd services
+systemctl status webdav
+# or
+systemctl status apache2
+# or
+systemctl status nginx
+
+# Check if process is running
+ps aux | grep -i webdav
+```
+
+**Restart service:**
+```bash
+sudo systemctl restart webdav
+# or
+sudo systemctl restart apache2
+# or
+sudo systemctl restart nginx
+```
+
+### 7. NAS-Specific Configuration
+
+**Synology NAS:**
+1. Control Panel → External Access → Router Configuration
+2. Enable port forwarding for port 5006
+3. Control Panel → Security → Firewall
+4. Ensure port 5006 is allowed
+
+**QNAP NAS:**
+1. Network & Virtual Switch → Port Forwarding
+2. Add rule for port 5006
+3. Security → Firewall → Allow port 5006
+
+**Other NAS:**
+- Check NAS admin panel for port forwarding/firewall settings
+- Ensure WebDAV service is enabled and configured for external access
+
+## Diagnostic Steps
+
+1. **Run the diagnostic script:**
+   ```bash
+   chmod +x diagnose_webdav.sh
+   sudo ./diagnose_webdav.sh
+   ```
+
+2. **Test local connection:**
+   ```bash
+   curl -k -X PROPFIND https://localhost:5006
+   # or
+   curl -k -X PROPFIND https://127.0.0.1:5006
+   ```
+
+3. **Test from internal network:**
+   ```bash
+   curl -k -X PROPFIND https://<NAS_INTERNAL_IP>:5006
+   ```
+
+4. **Test from external network:**
+   ```bash
+   curl -k -X PROPFIND https://jimmygan.myds.me:5006
+   ```
+
+5. **Check if port is reachable externally:**
+   ```bash
+   # From external network
+   telnet jimmygan.myds.me 5006
+   # or
+   nc -zv jimmygan.myds.me 5006
+   ```
+
+## Quick Fix Checklist
+
+- [ ] Service is bound to `0.0.0.0:5006` (not `127.0.0.1:5006`)
+- [ ] Firewall allows port 5006
+- [ ] Router port forwarding configured (External 5006 → Internal NAS IP:5006)
+- [ ] Router firewall allows incoming connections on port 5006
+- [ ] WebDAV service is running
+- [ ] Tested local connection (works)
+- [ ] Tested internal network connection (works)
+- [ ] External connection still fails → Check ISP/port blocking
+
+## Additional Notes
+
+- **DDNS:** Your domain `jimmygan.myds.me` appears to be a DDNS service. Ensure it's properly configured and pointing to your current external IP.
+- **HTTPS:** Since you're using HTTPS, ensure SSL certificate is valid and the service is configured for SSL/TLS.
+- **IPv6:** The error shows IPv6 connection attempts. If your router/NAS doesn't support IPv6 properly, you may need to disable IPv6 or configure it separately.
+