By:
Filters
What's new
Carbonite

South Africa's Top Online Tech Classifieds!
Register a free account today to become a member! (No Under 18's)
Home of C.U.D.

DNS forwarding Advice

matrixkid

matrixkid

Legendary Member
Rating - 100%
80   0   0
Joined
Apr 23, 2010
Messages
884
Reaction score
145
Points
4,835
Location
Bellville
Hi all. Looking for some advice on a good free or cheap dns forwarding service.
All I want to do is be able to reach my pc from outside my home network. Essentially I would get a Static IP from my isp but Afrihost agent says Vumatel does not support Static IP at all.

Any suggestions would be appreciated.
 
I use dynu.com and make use of their freeddns.org domain paired with their dynu ip update client. Works great, and have serval *.*.freeddns.org domains, each going via my internal proxy pointing to the LAN IP.

Got about 8 devices I can access remotely via hostname, without having a static IP.
 
Been using No-IP for a few years now, works pretty well.
Only gripe with the free version of the service is you need to confirm it every month, but to me that is no major biggy.

They also have a DUC client, but prefer to rather have it setup and run from the router.
 
matrixkid said:
Hi all. Looking for some advice on a good free or cheap dns forwarding service.
All I want to do is be able to reach my pc from outside my home network. Essentially I would get a Static IP from my isp but Afrihost agent says Vumatel does not support Static IP at all.

Any suggestions would be appreciated.
Click to expand...

Hi,

Have a look at Tailscale (free). Keeping your PC behind a private VPN will keep you protected from any future Windows high-severity vulnerabilities + it will assign each device on your VPN with a unique internal IP which is static, so its a win-win.

We use Tailscale to network our entire infrastructure, manage devices, maintain perimeter ACL and access internal appliances unsuitable for the open internet. Feel free to pop me a PM if you need a hand.

Mike
 
matrixkid said:
Hi all. Looking for some advice on a good free or cheap dns forwarding service.
All I want to do is be able to reach my pc from outside my home network. Essentially I would get a Static IP from my isp but Afrihost agent says Vumatel does not support Static IP at all.

Any suggestions would be appreciated.
Click to expand...
I have a vumatel line managed by home connect Afrihsot is talking shit they do support Static IP Afrihost is just shit as an ISP.
 
also if you are going to port forward be careful of the ports you use etc. as there are many backdoors people can use to hack ransom...
 
I forward all the ports in my network 🥱
 
I use the router's built in DDNS - I have a Mikrotik router.
With regards to the static IP - I work for an ISP (sort of) and we have clients on Vuma with a static IP. Maybe the call centre agent was not knowledgable?
 
What kind of access to you want? Just files / folders or full control of the PC from within the OS?

Files & folders = OneDrive / Google Drive etc.
Full control = CloudflareD DDNS to give you a static name EG r001.mydomain.com + Cloudflare Access with RDP added. This will keep RDP secure and fast, like you are on the local LAN. Added benefits are that Cloudflare can protect your domain, website login URL(s) etc etc .


Anydesk is also a great solution, just make sure to secure it with a good password , 2FA and whitelist which Anydesk ID's or aliases can connect to your machine.
 
Last edited:
PaladinLaw said:
I use dynu.com and make use of their freeddns.org domain paired with their dynu ip update client. Works great, and have serval *.*.freeddns.org domains, each going via my internal proxy pointing to the LAN IP.

Got about 8 devices I can access remotely via hostname, without having a static IP.
Click to expand...
+1 for dynu

If you have a fairly recent TP-Link router, they offer tplinkdns.com namespace for free and the service is integrated on the router. Works really well for me.
 
LaserEldo (Pty) Ltd said:
Hi,

Have a look at Tailscale (free). Keeping your PC behind a private VPN will keep you protected from any future Windows high-severity vulnerabilities + it will assign each device on your VPN with a unique internal IP which is static, so its a win-win.

We use Tailscale to network our entire infrastructure, manage devices, maintain perimeter ACL and access internal appliances unsuitable for the open internet. Feel free to pop me a PM if you need a hand.

Mike
Click to expand...
"Keeping your PC behind a private VPN will keep you protected from any future Windows high-severity vulnerabilities"

How so? Only real protection is to patch, but yes there are network layers / elements that can assist (not prevent) in keeping his device(s) secure.
 
souljazk said:
"Keeping your PC behind a private VPN will keep you protected from any future Windows high-severity vulnerabilities"

How so? Only real protection is to patch, but yes there are network layers / elements that can assist (not prevent) in keeping his device(s) secure.
Click to expand...

Exposing RDP to WAN is how you end up on Chinese bot markets.

protected from any future Windows high-severity vulnerabilities
Click to expand...

threatpost.com

Widespread, Easily Exploitable Windows RDP Bug Opens Users to Data Theft

Most Windows versions are at risk of remote, unprivileged attackers abusing RDP from the inside to hijack smart cards and get unauthorized file system access.
threatpost.com threatpost.com
securityintelligence.com

How Attackers Exploit the Remote Desktop Protocol

Remote desktop protocol (RDP) is a common remote operating tool. There are also a few relatively easy ways attackers can get into it. See how to secure it.
securityintelligence.com securityintelligence.com

CVE - Search Results

The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.
cve.mitre.org
and my all time fav because even the CISA had to tell people about it: Microsoft Operating Systems BlueKeep Vulnerability | CISA

How so? Only real protection is to patch
Click to expand...
Patch? Humour this: Too late. Your entire org got popped at 4am this morning when the attacks started flooding 0.0.0.0/0 and every IT admin awake by the grace of the Lord started shouting to "JUST UNPLUG EVERYTHING" - I hope your backups were tested.

Shit, there might not even be a patch out by the time you're cooked.

but yes there are network layers / elements that can assist (not prevent) in keeping his device(s) secure.
Click to expand...
I agree, layers protect you when software fails - which is why I said

protected from any future Windows high-severity vulnerabilities
Click to expand...

and

mikewazar said:
Please, please, PLEASE do not leave your RD open to the internet. You are asking for trouble.
Click to expand...
 
You must log in or register to reply here.

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)

Similar threads

X
UDM PRO SE IDS/IPS vs FortiGate (Or similar) for Small Business
Replies
2
Views
122
ikons
ikons
Asteroid Z
  • Locked
[For Sale] Tenda W18E Multi Wan WiFI Router
  • Location:
    1. Durban
Replies
2
Views
56
Asteroid Z
Asteroid Z
N
Vumatel Port forwarding
Replies
0
Views
94
Nndweleni
N
BARGUILD
New ISP...and moving...
Replies
2
Views
132
BARGUILD
BARGUILD
OneSmugDuck
Seeking advice on pursuing a career in Professional Wrestling
Replies
19
Views
521
yourang
Y

Latest posts

Top Donors

IOPS
NI∀ƆOƆ‾⊥ᴚ∩ʞ
eagle2k
Sp3c1al1zed
Confucius
nephilm
Athos
EELeat
Off-The-Chart
McDuncun

Share this page

Back
Top Bottom