1

I am trying to set up a home server accessible from outside. I have requested a static IP to my ISP and forward the necessary port. Now, wherever I am I can just simply connect to my IP:port and everything works.

One question, is there any possibilities that two devices have the same public IP? If so, how is it possible to make sure I am actually going to the right one?

Thank you

2 Answers 2

0

Is there any possibilities that two devices have the same public IP?

Most definitely a possibility. There a several possible causes for it to happen, including malicious actors trying to intercept you data.

How is it possible to make sure I am actually going to the right one?

Without some security measures you cannot be sure you are connected to the "right" one. It's even possible that you could be connected to the "wrong" one, and it is connected to the "right" one, and passing on the requested data, after peeking at it, or changing it.

I am not a security expert, so my input on that is highly questionable. My first choice would be to use SSL/TLS with a good key, under your control, at both ends. Without knowing what you are doing while connected, I can't get much deeper anyway. Obfuscation, using some non-standard port, might help some, though it's usually considered very poor as a legitimate security measure.

The keys don't need to be commercial grade, or even have a chain of authority recognized by web browsers. Unless the "server" is intended to be accessed by others. You can tell your browser to "accept" any certificate, including self-signed ones.

0

If you have forwarded, say, port 43 to the NAT address of an internal server, X, that is listening on port 43, yes, you can simply connect to your external IP:43, and your connection will go to that internal server.

If two internal services use the same port (this would have to be from separate internal IP addresses, of course), you can export both services by forwarding two different external ports to that same internal port.

So, for example if a different machine, Y, is also running a service on port 43, you could arrange to forward port 4043 to machine Y's port 43. From the outside, you would connect to your external IP:4043, and it would be connected to machine Y's port 43.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .