Connecting NAS to internet

Question

Okay, 
 
 I am busy for 2 days now connecting my Synology NAS to the internet, but its not working. 
 
 My current network: 
 Router (with DHCP) IP: 192.168.2.254 
 Sophos UTM 220 (no DHCP) wan IP: from dhcp router 192.168.2.20 Internal 192.168.0.1 
 Laptop 192.168.0.2 
 synology NAS 192.168.0.3 
 
 I added port 5000 forwarding to the router (forwarding it to 192.168.2.20 (sophos)) 
 I added in the sophos a DNAT rule: 
 
 For traffic from (external WAN) 
 Using service: DSM NAS (1:5000 > 5000) 
 Going to (internal (network)) 
 Change the destination to NAS (192.168.0.3 
 and the service to DSM NAS (1:5000 > 5000) 
 
 Automatice firewall rule is ON 
 I still cannot connect to port 5000 from outside

apijnappels · Answer

2 possible mistakes: 
 1: for traffic from (External WAN) you need External WAN (Address) (so be sure to select the ip-address entry and not the interface) 2: your service is wrongly configured, it should be 1:65535 -> 5000 since it's only arriving on port 5000 but it can be initiated from any custom port. 
 I would advice you to not open up port 5000 but use 5001 instead, 5001 is an HTTPS (encrypted) connection while 5000 is plain text. You could also use Synology's quickconnect feature where you don't have to have any open ports and all traffic goes through Synology's servers to your NAS. 
 In stead of only forwarding 1 port from your router to the UTM you might be able to configure the UTM as a DMZ so all traffic is forwarded, that way in the future you would only need to configure anything on the UTM and can "forget" about the router. 
 If it's possible with your provider, you might be able to have your router bridge the connection to the UTM, so the UTM gets the public IP-address and there's no more double-NAT.