Page 2 of 2
Re: Another 'can't access from web' thread [SOLVED]
Posted: April 13th, 2012, 1:52 pm
by Handyman1984
No problem at all.
If you won't go down this road, please reconsider the vpn one.
You seem like an enthousiast and IPSEC-VPN is a really cool thing to have, it might be a bit more difficult to get working.
Re: Another 'can't access from web' thread [SOLVED]
Posted: April 13th, 2012, 2:54 pm
by tymanthius
Handyman1984 wrote:No problem at all.
If you won't go down this road, please reconsider the vpn one.
You seem like an enthousiast and IPSEC-VPN is a really cool thing to have, it might be a bit more difficult to get working.
I am definetly an enthusiast! By IPSEC-VPN you are referring to ipv6 tunneling? I have actually set up an account w/ a free tunnel provider, but that's all I've gotten done so far.
Although I'm not sure how that would affect my ability to use *.<hostname> w/o ports as all my servers are running on one machine, so the ports would still be needed, I would think. But I also know next to nothing about IPv6.
Re: Another 'can't access from web' thread [SOLVED]
Posted: April 13th, 2012, 5:32 pm
by Handyman1984
Nope, a VPN or Virtual Private Network is a way to access your network remotely.
IPSEC is a way to encrypt and secure IP traffic.
Alternatively you could also use PPTP, which is a lot easier to set up, but not as secure.
Also PPTP is set up using GRE, a protocol that not all NAT devices support.
Combined it gives you the ability to access any pc/service in your LAN securely, and if set up properly will allow you to browse the internet with your own exit point.
To name some benefits:
I can access sab from virtually anywhere, as if I'm on my own network.
My watched folder is on a CIFS share, so I'm able to drop nzb's in there, even when I'm not at home.
I'm able to actually stream what I just downloaded using CIFS only limited by my home line upload speed (and obvs client download speed).
For me the biggest benefit is the security. While on the road, most of us don't realize that using open wifi or hotspots (the ones that dont require a passphraze/key) allows your data to be sniffed by anyone thats on the same network.
I can use any open wifi or hotspot without having to worry about that because my VPN is encrypted.
So it won't help you to access your services without ports, but it does provide another way to 'access fron web' + benefits that is.
Small edit: The debian/ubuntu preferred package to set up an IPSEC-VPN server is openswan.