Network

What is going in and out

Q: Does the app show which IP addresses are blocked?

Yes. The Connections sub-view shows the auto-block policy - how many failed attempts within how long - and the list of addresses currently blocked, collapsed behind a count so a hundred entries do not bury the rest of the screen.

Five sub-views: live Network throughput, Connections with auto-block, Services you can toggle, VPN profiles, and DDNS with your public address.

On this page

Throughput
Connections & auto-block
Services
VPN
DDNS & external IP

Network

Live, per interface

Every interface the NAS has gets its own card - and that includes bonds and Open vSwitch interfaces, which many tools skip.

Shown	Meaning
Interface name and speed	The name DSM uses and its negotiated speed - `bond0 (20 Gbps)` for a two-port aggregate, for example.
Address	The IP the interface currently holds.
LIVE indicator	Green while the figures are updating.
Download / Upload	Current throughput, each with a rolling chart underneath so a burst is distinguishable from sustained traffic.
Network Info	Server name, gateway and primary DNS - the three values you want when something on the network is not resolving.
Active Connections	A count, with a way into the detail.

Direction is from the NAS's point of view. "Download" is traffic arriving at the NAS; when you copy a file to the NAS, that is its download.

Connections

Who is on it, and who is banned

Three things, in the order you usually want them:

Auto Block - whether DSM's brute-force protection is on, how many failed attempts trigger it and over what window. This is the setting that locks out a phone after a few wrong passwords.
Blocked IPs - every address currently banned, behind a count. A hundred blocked addresses is normal on an internet-facing NAS and would otherwise bury the screen, so it stays collapsed until you open it.
Active Connections - who is signed in, from which address, over which protocol, and when the session started. HTTP/HTTPS, SMB, NFS, FTP - each session is named.

You can end a session. An active connection can be kicked from here, which is the fast answer to "something is holding a file open" or "why is that address still connected".

Connections showing the auto-block policy, blocked IPs and active connections

Services

What DSM is running

A count at the top - running out of total - then every service DSM exposes, each with a state dot and a switch.

File and connection services - SMB, NFS, AFP, FTP, FTPS, SFTP, rsync, iSCSI. Turn one on or off from the phone.
Discovery and printing - Bonjour Printer Broadcast, WS-Discovery, the CUPS printer daemon.
Infrastructure - NTP, KMIP and the rest.
System-managed services carry a lock. DSM runs those on its own terms, so the app shows their state and does not offer a switch that would be refused. A control that cannot work is worse than no control.

Turning off SMB will disconnect anyone using it. These are live switches on a running server, not a preferences screen.

VPN

Client profiles

The VPN sub-view lists the VPN client profiles configured on your NAS - the connections it makes out to somewhere else - and lets you ask it to connect or disconnect one.

It does not claim which profile is connected, and that is deliberate. The NAS acknowledges a connect or disconnect request but the DSM record the app reads carries no status field, so there is nothing to read a verdict from. Rather than infer one and be confidently wrong, the app says so and points you at DSM's Network page, which is the place that knows.

With no profiles set up, the screen says so and tells you where to add one: DSM, under Network › Network Interface.

The VPN sub-view listing client profiles

DDNS

Your public address, and the name that points at it

One card, two independent halves:

External IP - the public address your connection currently has.
Each DDNS hostname your NAS publishes, the status DSM holds for it, when it last updated and when it will update next.

Refresh and Update

Refresh re-reads what DSM currently holds.
Update now asks the NAS to publish its address again - the same thing DSM's own button does.

Each half fails on its own. A DDNS provider that is down does not take the public-IP reading with it, and an unreadable IP does not blank the hostname status. Two readings, two verdicts.

It reports what DSM stores, not a live test. The app does not resolve your hostname itself to check it points at you. A provider that answers a request says nothing about whether your record is correct, so the app relays DSM's own verdict rather than inventing a second one.

DDNS and external IP, with the public address and hostname obscured

The address and hostname in this screenshot are blurred - they are a real NAS's.

Common questions

Network FAQ

Can I see how fast my NAS is transferring right now?

Yes. The Network sub-view shows live download and upload for every interface the NAS has, each with its own chart, its link speed and its address. Bonded interfaces appear as the bond, with the aggregate speed.

Can I start and stop DSM services from the app?

Yes, for services DSM lets a client control - SMB, NFS, FTP, rsync and the rest each have a toggle. Some are marked system-managed, which means DSM runs them on its own terms and the app shows their state without offering to change it.

Does the app show which IP addresses are blocked?

Yes. The Connections sub-view shows the auto-block policy and the list of addresses currently blocked, collapsed behind a count so a hundred entries do not bury the rest of the screen.

Can I tell whether my VPN is connected?

The app lists the VPN client profiles your NAS has and lets you ask it to connect or disconnect one. It does not claim which one is up, because the DSM record it reads carries no status field. DSM's Network page is the place that knows.

Why is my public IP different from what a website tells me?

Because this is the address your NAS's connection has, read through DSM. If your phone is on mobile data it has a different one. They are two different networks and both readings are correct.