Self-hosted server: router/firewall configuration
The internet router is a residential model from Vodafone. It seems to do the following
-
Supports IPv6, including
- full support for outgoing IPv6 connections
- stateless address autoconfiguration (SLAAC)
-
Allows IPv4 incoming connections only.
- By default, blocks all incoming connections (IPv4 only).
- Opens individual ports forwarded to specified host:port (standard NAT stuff, IPv4 only).
- Can set up a DMZ server, where all other incoming connections are routed to a single host (IPv4 only).
- No way to configure IPv6 incoming connections.
-
It seems fairly reliable, but something drops out periodically.
- The router itself
- The far-end of the fibre connection
- The local Wi-Fi extender (TP Link Deco system)
Setup
-
Ensure that IPv4 address remains fixed: requested from Vodafone, $5 per month
-
Ensure that IPv6 address remains fixed; might happen at the same time
-
Port configuration details
- Leave the standard port-forwards as they are
- Set up DMZ pointing to new server
- Ensure that new server has firewall (ufw) enabled and stopping as much as possible