[mythtv-users] Demise of Mythweb

[Mike Hodson]

On Mon, Feb 3, 2025, 16:36 James Linder <jam at tigger.ws> wrote:

>
>
> I’m mildly surprized that ssh is not mentioned
>
> I have only a single port forward from my router to the backed (ssh)
> The backend SSHD is WithoutPassword ie only public key
>

SSH is great if you have mastered local:remote port forwarding or use a
client frontend that sets them up for you.   SOCKS5 is another possibility.

But neither are IMHO as easy to setup for a beginner than a quick secure
VPN w/tailscale - and no external ports need to be manually forwarded from
a router as it will automatically setup a UPNP forward on consumer grade
routers that don't disable this, or a geolocst2d local proxy with low ping
as a relay.

Now you are a bad guy who knows ANYTHING that is to be knowed: you cannot
> login and webbackend is available in all it’s glory, even watching is
> possible.
> (Well if he knew private key, public key of a valid user …)
>

A personal setting I use on my SSH is to change the port to something else
than 22 to lessen log spam from drive by port scanners and bruteforce bots.

Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mythtv.org/pipermail/mythtv-users/attachments/20250203/2dfd2807/attachment.htm>