4 ms·
> If they really needed access to the router remotely, it would be much saner to expose an SSH server with pubkey-only access or VPN, both with brute forcing pr
by kralos 5y ago
> If they really needed access to the router remotely, it would be much saner to expose an SSH server with pubkey-only access or VPN, both with brute forcing protection, and allow tunnelling to the router UI only from the LAN side.
any chance you can explain that to my mum?
- yipbub 5y ago> it would be much saner to expose an SSH server with pubkey-only access or VPN It would be safer to leave open to the public only a secure protocol based on strong cryptographic keys instead of a password. Or you have to be signed in to a VPN to see the page. > brute forcing protection Try too many passwords? Try again in 1 minute. Again? 30 minutes > allow tunnelling to the router UI only from the LAN side I think this one means don't expose it to the internet at all. Just from your local network. >
- msh 5y agoYour mom probably don’t need wan access to her router.