Port fowarding questions

[jay2472000]

Network setup is as follows

Internet--->Westell 4 port gateway /wireless acces point /router ---> internal lan

Im using 3 of the ports off the Westell and the wireless access point. Using DHCP but soon to change that.

Right now I am just fiddling with some stuff from outside my network for the first time and have fowarded some ports. One example is a program called Yawcam that I fowarded port 8081 so that I can use my smartphones browser to log in and view my home from abroad. The webcam software has a captive portal set up and I have it configured with a username and a strong password

I have also been goofing with webpage design a little and set up a very very simple webpage on my freenas. So by typing my in my Ip and the correct port it displays my directory. ( I did change it from port 80 just to make me feel a little safer)

So how much have I opened myself up to a potential security risk? Im assuming the webcam software is ok, IE its as strong as my password and username combo.....assuming theres not some odd backdoor way into it. Im really a little more concerned with putting my Freenas box on the web. Should I go ahead and rebuild my pfsense box and put the webserver on a seperate Vlan?


Just looking for a little guidance as I have never before opened my lan up to the web. Thanks in advance, J

 

[berky]

your port forwarding should only be to a single IP. as such, you've only poked a hole for that single port to get to a single backend IP. However, if that software has any vulnerabilities that would allow complete PC control (unlikely), then you have opened up your entire subnet.

the most likely scenario is that you should be fine. imho, you should put any externally accessible devices in a separate subnet (protected by a firewall) from any devices that should only be accessible locally. a lot of times this is unnecessary, but it can never hurt.