I'm really grateful for your input. I ONLY need access from the local network (mostly one PC) -- I want to ensure it is specifically NOT accessible from the ou

I'm really grateful for your input. I ONLY need access from the local network (mostly one PC) -- I want to ensure it is specifically NOT accessible from the outside. I patch every time the box tells me a patch is available. This article[0] says "QNAP told users to immediately yank their internet-exposed NAS devices off the internet". That made me realize that I'm not knowledgeable enough to know beyond a doubt that my device is not "on the internet" if it's downloading and applying updates. I sometimes feel like the only way I can do it is wrong: that without a deep understanding of what could happen, that I can't know I've done it right. [0]https://threatpost.com/most-qnap-nas-devices-affected-by-dirty-pipe-linux-flaw/178920/ https://threatpost.com/most-qnap-nas-devices-affected-by-dir...