Return to site

Your Synology NAS only needs to talk to a few places.

Lock it down !

November 1, 2026

A cloud DNS service built for Synology DSM. Your NAS can reach the services it really uses (updates, backups, time and certificates) and nothing else. Nothing to install. Set up in two minutes.

Why your NAS needs whitelist ?

our NAS holds everything: files, photos, backups and company records. That makes it a favourite target for ransomware and data theft.

When attackers get in, the malicious code they plant usually needs to phone home: to fetch instructions, download more tools, or send your data out. To do that, it first looks up an internet address by name. That lookup is DNS.

If the lookup fails, the malware is cut off.

Block-list vs lock-down

A person visits thousands of websites. Your NAS doesn't. It checks for DSM updates, sends backups, syncs the clock and renews its certificate. APLENS lets exactly that through.

The Default DNS with whitelist protection is 35.215.165.139

For best availability, we recommend the alternative DNS set 8.8.8.8 or your current DNS.