Ok, so, here is my my issue. awhile back, a friend wanted to grab some files from me, so I gave him my AFP (Apple File Protocol) address. Much like FTP SSH or SMB. Its cool for mac users and thats about it. He was really surprised that I was forwarding that port and warned me to close all ports, ssh, ftp, afp, smb, torrent... etc. Basiclily closing all ports to my house. He said that i should have only one port open and thats to VPN into behind my firewall and then I can access all of my protocols and more. I understand that this is more secure. But its really slow. Im a photographer and I may have to download files that are 20-30 GB. Without the VPN this took a long time. With VPN, it even takes longer.
So, is it really necessary to have all ports closed. I have very long sophisticated passwords that are combination of lips numbers digit caps and lowercase all mixed and not including a single dictionary word or acronyms.
Can I open up my AFP port? What are the odds/risks of a DDOS or even bruteforce attack?