Hacker News Reader

Comment by LeifCarrotson | Hacker News Reader

Navigate to your router's IP, go to Console Settings, scroll to Advanced and un-check Remote Access:

https://i.imgur.com/RzXpT6Q.png

After doing that, you can't access your router remotely from The Cloud, (well, you can log in over the VPN, remote into a computer on-site, and access the router from that computer) but you're secure against a whole class of bugs and errors in Someone Else's Computer.

View on HN

I set up nginx to point to my UDMP's 443 port via a subdomain of mine. Unsure if this is horrible security but I don't have 'Remote Access' turned on. I guess at worst it relies on UniFi OS security and auth to be solid?

I setup a domain from name cheap and pointed a subdomain towards my routers IP. Then I VPN using Unifi to control it. I cancelled the domain and use the IP but I’ve found it does change from time to time.

Unifi’s firewall blocks a ton of IPs whenever I open a port for plex or whatever. I’ve tried to fight back against US providers letting anyone with a VM run port scans but they only care about getting paid.

If you're running UniFi on FreeBSD/OpenBSD it won't even allow cloud access because their Java websocket library for it doesn't include support for anything but Mac/Win/Linux

Before all this cloud stuff you could just run the ubiquiti protect suite on a linux box. But then they discontinued it and the ios app to push their cloud offerings on people.

Reply on news.ycombinator.com