4 ms·
Sounds like a great idea until you ever try to connect to your own servers from a network with spammy neighbors.
by lxgr 8mo ago
Sounds like a great idea until you ever try to connect to your own servers from a network with spammy neighbors.
- BLKNSLVR 8mo agoGood network admins have contingencies for contingencies for contingencies.
- kees99 8mo agoBack in the day - port knocking was a perfect fit for this eventuality. Nowadays, wireguard would probably be a better choice. (both of above of course assume one is to do a sensible thing and add "perma-bans" a bit lower in firewall rules, below "established" and "port-knock")
- xnyan 8mo agoAnything important requires wireguard, you can use that on any personal device. For situations like plex from the hotel TV on vacation, I have a workflow that lets me quickly whitelist a client with my firewall specially for access to plex.
- lxgr 8mo agoNot everything "requires" Wireguard. Wireguard is great, and I use it myself for many things, but it's totally fine to expose some services to the public Internet.