What’s your go too (secure) method for casting over the internet with a Jellyfin server.

I’m wondering what to use and I’m pretty beginner at this

  • Encrypt-Keeper@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    2
    ·
    17 hours ago

    a rule blocking connections from other countries, and also requiring the request for the login page come from one of the services on your domain, will block virtually all malicious attempts to access your services.

    Whoa whoa whoa. What malicious attempts?

    You just told me you were the statistical wonder that nobody is bothering attack?

    That’s 2k requests made. None of them were served.

    So those 2k requests were not you then? They were hostile actors attempting to gain unauthorized access to your services?

    Well there we have it folks lmao

    • _cryptagion [he/him]@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      4
      ·
      17 hours ago

      Whoa whoa whoa. What malicious attempts?

      I said it would block all malicious attempts. I didn’t say the people trying to access my services were malicious. Clearly the OP is worried about that. I however, having just the meager experience of, you know, actually fucking running the a Jellyfin server, am not. But I’m also not trying convince people I’m a smug cybersecurity expert with a decade of experience.

      • Encrypt-Keeper@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        17 hours ago

        As OP should be. 2k attempts a day at unauthorized access to your services is a pretty clear indicator of that. Seems you’ve mitigated it well enough, why would you suggest that OP not bother doing the same? If you’re so convinced those 2k attempts are not malicious, then go ahead and remove those rules if they’re unnecessary.

        Perhaps as someone with only meager experience running a Jellyfin server who can’t even recognize malicious traffic to their server, and zero understanding of the modern internet threat landscape, you shouldn’t be spreading misinformation that’s potentially damaging to new selfhosters?

        • _cryptagion [he/him]@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          3
          ·
          17 hours ago

          If you were any good at reading, you would know that I said those rules protect the Authelia login page. They don’t protect the Jellyfin service or its login page at all. The Jellyfin instance is not behind anything except Cloudflare. I stated that in my very first message. Removing those rules would have no effect whatsoever on Jellyfin.

          • Encrypt-Keeper@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            4
            ·
            17 hours ago

            It’s over man. You’ve made it very clear you have no idea what you’re talking about, how any of this works, or even what’s going on with your own selfhosted services. Back peddling away from your own arguments and trying to sweep up the beans you’ve already spilled isn’t going to help your case.

            Maybe stick to your day job, I just don’t think that cybersecurity career is in the cards for you.

            • _cryptagion [he/him]@lemmy.dbzer0.com
              link
              fedilink
              English
              arrow-up
              3
              arrow-down
              2
              ·
              17 hours ago

              Yeah, some random nobody trying to convince people they’re a cybersecurity expert is gonna be what shuts me up.

              I very clearly laid out my setup, and how you were wrong. If you can’t even read well enough to understand that, let alone form som kind of actual argument backed up by reality, that isn’t my problem to deal with.

              I would say stick to your own day job, but if this is actually your day job then maybe check out whether your local Burger King has openings, you’ll do less harm there.

              • Encrypt-Keeper@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                4
                ·
                edit-2
                16 hours ago

                You’ve argued from a position of weakness against a well known and accepted truth, and have provided zero proof to back up your outlandish claim. On the contrary you’ve admitted to the existence of unwanted access attempts to your services, as well as your usage of mitigations to the same problem you insist doesn’t exist.

                It’s over man. You’re certified expert yapper but that’s not going to convince me or anyone else here that you know what you’re talking about. It’s a wrap.

                • _cryptagion [he/him]@lemmy.dbzer0.com
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  16 hours ago

                  It’s over man. You’re certified expert yapper but that’s not going to convince me or anyone else here that you know what you’re talking about.

                  Is this Reddit? When were we supposed to be seeking the validation of random strangers on the net, especially ones who brag about their bona fides like it’s a CoD lobby? You keep saying it’s over, but for some reason you keep coming back here to try to get the last word. If I’m in a position of weakness, why is it you’re the one trying so hard? You’re in a dick measuring contest against yourself. I’m getting second-hand embarrassment.