Page 1 of 1

Safely exposing service to the internet

Posted: December 28th, 2018, 5:54 am
by tiwas
Hi.

I'm running sabnzbd (plus some more services) on a Windows 10 Pro computer on my LAN. For simplicity, I'm playing with the idea of exposing these services on the internet, but I'm worried about the security aspect. The Windows firewall (or most software firewalls, for that sake) doesn't really make me feel too safe.

My setup is pretty basic. I'm behind a router with a firewall (default router from my provider, so probably not the best) and then via a gigabit switch to my computers. If one hacks my "server" my whole LAN will be exposed.

Are there any good ways to expose the services without leaving my whole network exposed and vulnerable? I tried searching the FAQ and had a quick look here (let's be honest - I didn't have time to search too much as I'm headed out to the gym and then to dinner with my girlfriend and her family. These things have a *very* low WAF, so I guess she wouldn't be very impressed if researching this took priority over her family :p ). I hope someone can give me some good pointers along with assurances on the security - and I'm very open to the idea of not exposing them, if that's the best bet. Most of the time I can VPN in through my NAS, so it's not a dealbreaker for me :)

Thanks!

Re: Safely exposing service to the internet

Posted: December 28th, 2018, 2:49 pm
by safihre
The VPN sounds like one of the safest ways.
You could setup a proxy, it's also listed under the advanced topics in the wiki. But it's more complicated.

Re: Safely exposing service to the internet

Posted: December 28th, 2018, 2:51 pm
by tiwas
safihre wrote: December 28th, 2018, 2:49 pm The VPN sounds like one of the safest ways.
You could setup a proxy, it's also listed under the advanced topics in the wiki. But it's more complicated.
Thanks. I've had a proxy some time ago, but it was problematic. I wound back up with the VPN. Guess I'll stick with that until I can afford to pay for a hosted solution.