TS-453 network stack stopped, how to recover?

Hi, I have TS-453 which decided this morning to “stop working”, i.e. not responding to any of the 2 network interfaces connected to the local network. The system is on the latest published firmware, updated perhaps week ago and the apps were updated to the latest versions at the same time.

I rebooted the network and the NAS, and on its screen everything seems fine, it boots up, checks volumes, mounts volumes - no errors, all green LEDs, both network interfaces show they are working ok. But… when I try pinging any of the IPs assigned to it or accessing the web interface, it just does not respond. I checked my very-flat home LAN and there is nothing suddenly preventing traffic to the NAS either.

What caught my attention was that during the NAS start-up, at one point the NAS becomes pingable on both network cards. Then it finishes the boot sequence, sounds the usual long beep to signal boot completion and then shortly afterwards the network communication is stopped. I tried access from 3 different devices which should rule out that a single device misbehaved somehow and QNAP firewall blocked it (although I am not sure if QNAP Firewall would detect/block DOS attacks anyways).

My suspicion is that either:
a) the network stack on the NAS is stopped or corrupted or
b) perhaps the QNAP Firewall App that is installed decides to block the rest of the local network.

I think (b) is probably more likely as for (a) I would expect network config or stack to be corrupted if there was an update (perhaps QNAP security updates that go in automatically/unattended?). At least (b) seems easier to check before going nuclear.

Is there a way to unblock/check/reset QNAP Firewall App rules (if that is the case), or check the status/health of the network stack within the QNAP OS?

For example, would any firewall rules clear out after a set period of time, e.g. if firewall thought it was under DOS attack, would it block IPs for e.g. 24 hours so I could just try again in a day?

Thank you for any help or suggestions

So I think I managed to resolve this. I connected keyboard and hdmi to it and was able to log on to the console.

On the console I could ping externally but if I would do /etc/init.d/network.sh stop/start there were many “failed” lines or lines suggesting ip tables were not present. I checked eth0 but could not see an IP address assigned (this was probably an error, I should have checked br0).
In any case, I wasn’t sure if these “failed” lines were “normal” or not for the QTS so I updated the QTS manually using update.sh (followed instructions I googled from the Qnap site) so to make sure there isn’t a software corruption.

However, when I logged on again I still wasn’t able to access NAS from the LAN. So I disabled the firewall manually iptables -F; iptables -X and suddenly I got web access and everything.

When looking the firewall via UI I noticed something like 100k blocked events in the last 24 hours and they mostly seemed to be packets marked as ‘any to any’. When I tried re-enabling the firewall via UI it warned me that my client is on the disabled IP list and it didn’t want to proceed. But… when I checked the disabled IPs… there were none in the list. I went to the “disabled IP analysis” option and there was only one IP blocked there - the IP of my home router/gateway (??).

So I edited the firewall config to always allow local subnet (“automatically detected local subnet”) and so far everything seems to be working ok.

Whilst there was a possibility of some bad actor triggering this, it is a little unusual and there isn’t enough data to describe what exactly did the firewall think it was blocking. Perhaps something to add to the future versions of QFirewall?