Wireguard is blocked in my country, so I no longer can use Tailscale or other Wireguard-based solutions. My home server is behind a NAT. What other ways of secure private connection can I use?

  • Björn@swg-empire.de
    link
    fedilink
    English
    arrow-up
    12
    ·
    11 hours ago

    Port forward your SSH-server. You can forward ports through SSH to access web services or others running on the server or anything else in the network.

    But only allow access through keys. And maybe try to use a different port than 22. That usually gets hammered a lot, trying to find accounts with weak passwords.

    • alexquiniou@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 hours ago

      Yep, that a good option. But only with a key ! Not with a password.

      Bot from everywhere will try to forcebrut attack with many password attempt.

      I got in this situation in the past. Nothing wrong happened, but it was stressfull.

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      5
      ·
      8 hours ago

      Changing the port doesn’t actually accomplish much

      Best practice is to just harden SSH so that not traffic gets nowhere