Comment on Ditching the VPN and port forwarding the selfhosted way
SexualPolytope@lemmy.sdf.org 2 weeks ago
Hey, can you maybe add some description for what the iptables entries do? I have a similar setup with a lot less iptables rules that works well for me. But I’m not an expert in networking, and am now worried that I might be missing something that can leak my home IP.
ntn888@lemmy.ml 2 weeks ago
Thanks for the feed back. I started out with that post I referenced in my article, which had fewer entries. It didn’t work. Caveat was although the online port checkers were reporting the port as open, it was not actually making through the tunnel!
I actually solved it by asking chatgpt!! I put in the suggestions and it worked. I’m also no expert on creating iptables, but once it was in place it seemed self explanatory.
I ran netcat as client-server to test it actually worked.
andscape@feddit.it 2 weeks ago
Idk man, it seems pretty irresponsible to me to write a blogpost with stuff that you got from ChatGPT without understanding it. People will assume that if you wrote a blogpost on this then you know what you’re doing. ChatGPT gets stuff wrong all the time, and we’re talking about firewall configuration here. If it misconfigured some stuff it could leave you and your readers vulnerable to all kinds of shit.
In this case it seems to me that (luckily) there’s just a bunch of redundant routing, but the next time it could be leaking your and your readers’ torrent traffic out of the VPN tunnel, leaving you vulnerable to legal repercussions for piracy.
Please don’t authoritatively post stuff that you got from the automatic bullshit generator without understanding it.
ntn888@lemmy.ml 2 weeks ago
I understand what you mean. It’s become a habit of mine lately, and I learn lots in the discussion to.
In my defence I did run some tests and confirm it’s functioning.
SexualPolytope@lemmy.sdf.org 2 weeks ago
I took a look at it. From what I understand, some of those lines in your setup is redundant. And the final product seems to do the exact same job as mine. In any case, if it works, it works.