106
How much of what you self-host do you keep LAN only over making accessible across the internet? (lemm.ee)
submitted 2 years ago by to c/selfhosted@lemmy.world
94 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 years ago (1 child)

Limiting the attack surface is a big part, geo restrictions, reputation lists, brute force mitigation, it all plays a role. Running a vulnerability scanner against your stuff is important to catch things before others do and regular patching is important too. It's can be a rewarding challenge.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago* (last edited 2 years ago) (1 child)

    Can you recommend me a vulnerability scanner?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    https://www.tenable.com/products/nessus/nessus-essentials

    https://www.rapid7.com/blog/post/2012/09/19/using-nexpose-at-home-scanning-reports/

    https://openvas.org/

    Both Nessus and Nexpose are typically enterprise class systems but they have community licensing available for home labs. Nessus can even be set up in a docker container. OpenVAS is more or less free but can be upgraded with pro-feeds, but last I tried it it was a bit more rough to use.

    Do be aware though that throwing a full force scan will use a lot of CPU and can break things depending on the settings, so it's good to practice their settings on some non-critical systems first to get a feel for them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •