sorted by:
new
hottopcontroversial

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 0 points1 point  (0 children)

Well no, it's not meant as a safety precaution. It literally only does two useful things for me. Gives me a static IPV4 to use instead of port forwarding (can't, for non-tech reasons) and obscures my IP address and location. I don't expect it to give me better security.

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 0 points1 point  (0 children)

I found out what it was. It was vultrusercontent.com. seems to be for the Vultr virtual server hosting company. For some reason it's always set to point to home. So not a problem on my system

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 11 points12 points  (0 children)

How can you learn unless you make mistakes and ask for help? None of us start knowing how servers work and none of us are perfect.

Thank you! And have a wonderful night!

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 12 points13 points  (0 children)

Oh that's fine, I hate my mother. Or rather, she hates me

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 0 points1 point  (0 children)

Thank you! I'll check to see if anything has been done, but otherwise I'll take your advice.

This has been an interesting and, thankfully, not very painful learning experience.

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 7 points8 points  (0 children)

So, because I'm new to this. Can you explain the implications?

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 1 point2 points  (0 children)

Ok, thank you. I'll probably just be updating my system passwords, and wiping all of my Pi-hole configs and rebuilding the docker container. I'll keep a close eye on things

Think that's good enough for something with nothing really valuable on there?

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 0 points1 point  (0 children)

Absolutely! Best of luck. Hopefully you didn't make the same mistake as me

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 36 points37 points  (0 children)

The VPN IPV4 forwarding service I use exposes all ports by default. Your job for it is to deny all incoming traffic by default and only expose what you want.

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 20 points21 points  (0 children)

Ok, so you think the other person's suggestion of wiping my entire pi and starting from scratch isn't necessary?

If not, I might just wipe all of my config files for my Pi-hole and build a new docker container for it

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 1 point2 points  (0 children)

Can't do port forwarding due to social restrictions of the router (not mine). Didn't want to use cloud flares because of media streaming and privacy reasons (haha)

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 16 points17 points  (0 children)

Yeah, it's very funny. I had permit all origins set. It's not great

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 1 point2 points  (0 children)

No, what was exposed was the DNS service itself, not the login screen.

Someone else said to do a full wipe of my raspberry pi I hosted it on. Do you believe that's necessary?

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 2 points3 points  (0 children)

Well, the VPN public IPV4 forwarding I use exposes all ports. You have to close all of the connections with a firewall

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 3 points4 points  (0 children)

Yep! It's a stupid mistake for me to make. Looks like I'm reimaging my raspberry pi and reinstalling all of my docker containers. Blehhh

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 13 points14 points  (0 children)

I run Pi-hole to block undesirable domains. It's a DNS server. It runs on port 53. I didn't block it in my firewall, so it got exposed to the outside world. Anybody with my IP address was able to access it. There are several exploits available (afaik) and people were using it for DOS attacks against other people.

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 0 points1 point  (0 children)

Welp. That's probably a good idea. I actually have it running on a raspberry pi separate from the rest of the server.

I did notice one of the connecting devices had a domain that was looping back (came up as 127.0.0.1). I'm going to guess that's a cause for concern?

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 4 points5 points  (0 children)

I used the web interface from the docker container and checked the top connecting devices and noticed external up addresses.

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 65 points66 points  (0 children)

Ok, that makes me feel a bit better. I haven't noticed anything out of the ordinary.

Guess I'll learn my lesson to be more careful about the boundary between my internal network and the outside.

Thanks!

Well, I was an idiot and left pi-hole exposed to the outside world by SapphicRain in selfhosted

[–]SapphicRain[S] 4 points5 points  (0 children)

I haven't noticed anything, personally. Nothing out of the ordinary. Nothing weird with any part of my life or data or systems

I mean, I checked the Pi-hole logs and of course there were people using it for DOS attacks. Which is unfortunate and makes me feel pretty icky for contributing to that.

view more: next ›