I am planning to make public a website I have been working on; it seems to me that the only way I can do this without needing to pay any extra money to external hosts etc. is by hosting the server from my computer at home.
I am worried about this. I trust the site itself is robust and secure — not vulnerable to injection attacks etc., but due to the act of simply serving a site via my router will attackers be able to get at other devices on my local network or access to my own personal computer (from which I intend to host the server)?
I have run
nmap on my public ip, without my server running:
Nmap scan report for mypublicip
Host is up (0.0023s latency).
Not shown: 995 closed ports
PORT STATE SERVICE
53/tcp open domain
80/tcp open http
443/tcp open https
5000/tcp open upnp
8080/tcp open http-proxy
Nmap done: 1 IP address (1 host up) scanned in 40.89 seconds
Are any of these services vulnerable? They are all managed by my router, and I haven't set any of them up.
The above results were from a device on my home network, so apparently they reflect ports my router exposes to devices already on its network.
Here are the
nmap results from an external source:
Starting Nmap 6.00 ( http://nmap.org ) at 2016-08-26 15:44 EEST
NSE: Loaded 17 scripts for scanning.
Initiating Ping Scan at 15:44
Scanning mypublicip [4 ports]
Completed Ping Scan at 15:44, 0.06s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 15:44
Scanning mypublicip [100 ports]
Completed SYN Stealth Scan at 15:44, 4.25s elapsed (100 total ports)
Initiating Service scan at 15:44
Initiating OS detection (try #1) against mypublicip
Retrying OS detection (try #2) against mypublicip
Initiating Traceroute at 15:44
Completed Traceroute at 15:44, 0.04s elapsed
NSE: Script scanning mypublicip.
[+] Nmap scan report for mypublicip
Host is up (0.033s latency).
All 100 scanned ports on mypublicip are filtered
Too many fingerprints match this host to give specific OS details
Network Distance: 9 hops
What steps should I take to best reduce the chances of an attacker gaining access to my personal computer or other devices on my home network?