Network administrators of University where I am working want for me to stop using syncthing for my file synchronizing. They write to me that my computer is open to the world and anyone can connect to my computer (University network respectivelly) via ports opened for syncthing on my laptop. I believe a bold highlighted rows (ports 8384 and 22000) are related to syncthing. Any other?
May I change a settings of my syncthing instalation somehow to make University network administrators satisfied?
I have found several threads but it did not help me very much. Certainly my low IT network knowledge.
University network administrator message:
“You’ll want to shut down syncthing, as it requires you to have a couple of open ports to the world. Syncthing has a couple of recent vulnerabilities, check the CVEs (cvedetails is down at the moment).”
You can talk and try to reason with the admin, but given this pretty weird and incorrect statement (you neither have to open a couple of ports to the internet, nor does it have a couple of recent vulnerabilities) reasons may not help with that person.
There was one CVE on Go as well that affected us, although it didn’t have security impact just the potential to cause high CPU.
As imsodin says you do not have to have any ports open to the world. Generally you should have port 22000 open - which is safe, encrypted and certificate authenticated - but you don’t have to as long as you can connect in the other direction instead. The GUI port 8384 should generally not be open to the world and is not, by default.