…without snark or jumping down my throat. I genuinely want to know why it’s so unsafe.
I’m running a Synology DS920+, with my DSM login exposed through a Cloudflare tunnel. I have 2FA enabled, Synology firewall enabled with these rules in place. I also have this IP blocklist enabled.
After all of this, how would someone be able to break in via the DSM login?
Exactly this. I worked in a data center and when big zerodays hit, you could be certain you were wiping a few servers.
For a home lab, it could be anything from NAS access to the drives or access to your Voip cameras