LinuxQuestions.org - Iptables port forwarding question

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - Iptables port forwarding question (https://www.linuxquestions.org/questions/linux-security-4/iptables-port-forwarding-question-102607/)

Iptables port forwarding question

I have a network camera that I would like to view from the internet. It resides on my internal network at 192.168.1.131:8080. What I would like to do is access my webserver from where ever and be able to see the webcam. I travel quite a bit and just had a child. So my thought is setup 68.195.132.xxx:7777 (example) to forward to my internat webcam address. Is this possible, a good idea, are there better ways? I am a newbie and looking for help.

Thanks,

James

I travel quite and bit and just had a child.
Congratulations.

Is this possible, a good idea, are there better ways?
"Best Practices" sez servers should be in a "DMZ", separated from the user LAN.
If you don't have/want another box to build a DMZ with (and you don't want to opt for writing the images to a remote account like a free website) then I'd say you should set the box up as a server first, meaning it should be hardened properly (accounts, SW, services, ACL's, logging and auditing features, etc etc). Make sure to check out the rest of the boxen on the LAN as well. Then set up the router to only forward HTTPS traffic and set up Apache-SSL or Apache+mod_ssl. Make sure you test your setup from the outside before you go "live".