PDA

View Full Version : Need Opinion About Port Forwarding-Risk



vguitarist
04-09-2018, 11:05 PM
Greetings,

I have a new job that requires me to travel a lot, so I am interested in streaming video from my home Mezzmo server to the hotel room. I understand how to configure Mezzmo and router to enable port forwarding, but I'm stuck on whether it is a good idea? What are the risks of exposing my Mezzmo computer (sitting on my subnet) to the internet? It does have access to other computers on my subnet, so a hacker could do real damage.

I'm looking for opinion on whether I should do this and how to minimize risk of intrusion. Is there a better way to stream my video library? I know I can configure the router to accept connections only from the hotel IP address block, but that would be tough to manage given the amount of travel I do. I don't want to put the computer on my DMZ and expose my video library to the internet. Also, is the port-forwarded connection encrypted?

Thanks in advance for your feedback.

VGuitarist

Peter
04-10-2018, 08:57 AM
Hi,
exposing just the Mezzmo server port to the Internet poses very little risk, we have not had any vulnerabilities reported since the web access was released. If you are concerned then you can create a new user account with very few privileges and run the Mezzmo server under that account.

The connection to the Mezzmo server is not encrypted however if you want to add an encrypted https connection you can use nginx to provide a reverse proxy to the Mezzmo server and encrypt all the traffic sent over the Internet, see http://www.mezzmo.com/wiki/doku.php?id=streaming_using_https_secure_protocol for more information.