You don't need the deny in rules. If you have a router you can connect from the outside to your network with a VPN. From there you can ssh into your Pi and restrict it to local addresses. You need to decide if you need to get to your webserver from the wild or if you can VPN to your network first. ...

Not really. The default for UFW is to block inbound so you don't need any deny in rules, just allow rules. Just allow the ports for services that are running on your Pi. If you can restrict where they are coming from you should do that too. Do you have a router between your Pi and the internet or d...

knute wrote: ↑

Mon Jun 08, 2020 3:13 pm

The simple solution to this is don't block all outgoing, it's just going to make your life difficult and not make your computer any more secure. View your camera through an SSH tunnel.

Thank you for your reply.

Do my existing firewall rules look OK then?

I have been suffering with UFW and IPTables for some time now. I'm struggling to get it to work how I would like and/or feel safe in the knowledge it's working as I might expect. Ultimately, I want to use my Pi with the camera module and likely sensor module to detect someone, then record a clip. - ...