[mythtv-users] Demise of Mythweb

[James Linder]

> On Feb 4, 2025, at 07:55, Mike Hodson <mystica at gmail.com> wrote:
> 
> I’m mildly surprized that ssh is not mentioned
> 
> I have only a single port forward from my router to the backed (ssh)
> The backend SSHD is WithoutPassword ie only public key
> 
> SSH is great if you have mastered local:remote port forwarding or use a client frontend that sets them up for you.   SOCKS5 is another possibility. 
> 
> But neither are IMHO as easy to setup for a beginner than a quick secure VPN w/tailscale - and no external ports need to be manually forwarded from a router as it will automatically setup a UPNP forward on consumer grade routers that don't disable this, or a geolocst2d local proxy with low ping as a relay.
> 
> Now you are a bad guy who knows ANYTHING that is to be knowed: you cannot login and webbackend is available in all it’s glory, even watching is possible.
> (Well if he knew private key, public key of a valid user …)
> 
> A personal setting I use on my SSH is to change the port to something else than 22 to lessen log spam from drive by port scanners and bruteforce bots.
> 

I do, but it is trivial to by-pass
An interesting 1/2 hour watching the name:password attempts. Except that I cant be bothered, it might be fun to setup a honeypot
James