@portaloffreedom@social.linux.pizza
2026-03-15 14:06 UTC
Replies (5)
-
@w8l@scalie.zone 2026-03-15 14:28
@portaloffreedom@social.linux.pizza It does attract a bit more attention from hackers, yes. But in general, it's risky to expose your home IP address to the wider internet since there are botnets always looking for new devices to add to their networks. Also people just generally trying to steal data, wreak havoc, etc. at scale. Would recommend having machines you want available to the public internet in a VLAN or DMZ, isolated from the rest of your network. That way if they do get popped, attackers can't pivot to other internal machines.
-
@andnull@social.nouveau.community 2026-03-15 14:15
@portaloffreedom@social.linux.pizza Watching this thread intently
-
@foxyloon@blimps.xyz 2026-03-15 14:34
@portaloffreedom@social.linux.pizza Usually all that happens is the login page of your homelab router/firewall is presented to the web. In theory, this could be an attack vector if hardening of the router isn't performed. I.E. leaving the default login credentials in use. That's before all the data scraping and pen-test bots start hitting said web interface of the router, which might cause performance degradation due to the sheer volume of traffic trying to connect and gain access. Definitely routinely comb through the logs and blacklist problematic IPs.
-
@tedmielczarek@mastodon.social 2026-03-15 15:29
@portaloffreedom@social.linux.pizza I keep all of my home services out of reach of the public internet and access them via tailscale.
-
@atax1a@infosec.exchange 2026-03-17 19:37
@portaloffreedom@social.linux.pizza we expose our mailserver and a webserver from our home, on a static IP, with proper rDNS and have to deploy the same protections (greylisting on the smtpd, freebsd blocklistd for ssh, and a custom HTTP binding to blocklistd to catch scanners) as we do for cloud stuff. highly recommend The Book of Pf as a tutorial for secure network design even if you end up using iptables — the advice downthread to silo the exposed stuff into a DMZ is also how we run things. @andnull@social.nouveau.community