Problem - UI is available from outside

[dror]

Hello,
I have set my Rpi2 with RA. I dont have a router so my entire home machines are connected to one switch, which is connected to a cable modem.
The problem is, when I set my android browser to the Rpi IP, I get to the RuneUI, even when I am not connected via my local Wifi, just from the cellular network no matter where I am. This means anyone can set to that IP get access.

How can I prevent this?

Thanks..

[hondagx35]

[dror]

It is names ARRIS
cant tell the model though..

guess I need to hang up the Rpi now...

[nic]

Surely you must be hanging off the wifi ? I don't think you can vpn in without dynamic dns , besides that if you are accessing using a class C ip , it can't be from outside your network . Your best bet is to walk a few hundred yards down the road and retry

Nic

[dror]

Hmm well.. I was maybe 8 km away. And doubled checked now from home. When wifi off, I can access RuneUI.
this seems to be a serious problem.

My setup is :
Cable modem
|
Switch ---------- PC (connected to switch)
|
------------------- Rpi (connected to switch) --- Wifi dongle(AP)

dror

Edit: one thing I can think of (not sure if its related) is that I kill "wpa_supplicant -B" pid on startup in order to make my AP accessible.

[utschu]

I don't know of anybody who connects it's devices neither directly nor via switch behind a cable modem, as you would leave doors and windows wide open for any suspecious individuum tryind to get into your system.

This could only be brought to a higher risky level by posting the IP address somewhere in a forum.

I wonder wy millions of poeple are buying routers if they are not needed at all.

[Beelzebassie]

Back in the days, more than 10 years ago, I had a similar setup:

2+ computers with spoofed MAC-addresses (all identical) connected to the internet through a switch connected to a cable modem. Never had any problem whatsoever... The domestic adaptation of WiFi has made routers commonplace, and I would indeed not recommend a switch-only setup nowadays.

[dror]

Isn't my OS level firewall supposes to prevent those intrusions? (for the PC machine)
I have check with online tools and it seems I'm protected...

Edit:
checking
iptables -L via ssh, it seems all policies are set to "ALLOWED"

[dror]

well..

no one of the devs cares Runeaudio receives connections it should have dropped !?

[schinken]

Easiest solution is to get a cheap router and divide your home network from the outside world.