(untitled)

Dear Lainons, I am nicely asking you to fix my Navi! Jokes aside, I am in a pickle of a situation. I rent a room in a shared flat. I want to communicate to my computers at home when I'm on different networks. I have no access to this external router WiFi box where our common internet is distributed to each room. (See attached diagram) I (let/saw) my landlord forward the ports I need (22 etc.) to my internal router at my room. I forwarded the ports at my internal router to the device I wanted. But whenever I try on a different network to connect or check ports if they are open, they won't respond. (Even though ex. SSH daemon is working and tested on localhost). I really need to connect to my PCs in some reliable and effectively cheap/free method. Do I use Tor routing? I also want to set up a web server for all to connect but how. Pls help I am an Electr. Eng. student and have no idea on these soykafty internet dudes.

If you don't need very high speeds, then an onion service is the easiest option. It's more secure than having the default SSH port exposed to the world, as well.

get a cheap VPS and set it up as a wireguard server, have you PCs be connected to it as clients or set up a LAN on an OpenWRT router that uses your home's network as the WAN, then just forward the ports from your wireguard server to the addresses on the wireguard network with iptables or pf.

>>54875 * set up a LAN on an OpenWRT router that uses your home's network as the WAN and have that be the only wireguard client if you don't want to deal with having each of your PCs be connected to the VPN you can even set up policy based routing in OpenWRT to only route specific traffic over the VPN for e.g. SSH or a web service

>>54867 Something like ngrok would probably work. https://github.com/fatedier/frp is an open-source alternative that looks decent https://github.com/anderspitman/SirTunnel looks great but you might need a better understanding of how it works (which shouldn't be too hard since the entire repository is like 100LoC of python) Obviously you'd need a vps to connect to which would forward everything to your home, and at that point why not just host your website on the vps? However, this is still probably what I'd do if you also need to ssh into a computer in your home network, because you could ssh into any machine from the one set up for SirTunnel.

Maybe the uncontrollable router highlighted in red has been configured to not allow routing between the hosts on the same network. This is typical in public WiFi, you can only leave the LAN to access the Internet but you can't send/receive packets from/to other devices connected to the LAN even if they are on the same IPv4 network. You can test this by pinging from a machine in the yellow box another device in the same box. If this is the case you'll have to beg your landlord/network admin to allow for the router in the grey box to be reachable from the same network Also the diagram is unclear, each host in the yellow box is in his own network or they are on the same network? Also check the firewall rules in the grey box

>>54867 you can try port 22 by joining the "other devices" network (not using your router) and that should definitely work. the culrpit here is your own router because local devices by default would be inaccessible to the WAN for security reasons, you need to configure or whitelist the device you want to expose to wan. you should play with whatever firewall or iptables/forwarding settings you have with your router

>>54867 >I want to communicate to my computers at home when I'm on different networks. And that's what VPN's were originally made for! Set up one at your home network and make it accessible from the Internet. Don't forget about good passwords.

>>54867 probably blocks the lower ranges by default, try setting it to a higher port, something over 1024. Probably shouldnt use port 22 anyway in general, while it doesnt provide you real security it at least cuts back on traffic. Also make sure you are using keys to login and dont use passwords, set your incorrect login limit low, use something like fail2ban and set max active users low.

>>55202 oh ya and try setting your router in a "DMZ" there is probably something to set one up on your main router, basically it will let you raw dog the internet

>>54867 When your network (landlord's "modem") doesn't have a permanent public IP address, you won't be able to access it outside without a third party computer which has a permanent IP address to act as a bootstrap node: - a VPS with virtual private network routing - a dynamic DNS service - a "bootstrapping mesh VPN" service or community - a reverse proxy service or community Tor hidden service is the most widely spread, most documented and hence the simplest way of fulfilling last 3 requirements at a price of sometimes low speeds (compared to full broadband capacity at your place of living), something like Yggdrasil would probably be faster at a price of un-anonimity. Dynamic DNS is probably what you actually need. Software and manuals: https://github.com/search?q=dynamic+dns https://www.noip.com/ https://www.dynu.com/ https://freedns.afraid.org/

>>54873 This. If it's just for personal use and you don't need high speeds, it could be a pretty slick solution.