Can't Figure Out How To Port Forward With NextCloud

[mrphillyblunt]

Total noob here, wanting to be able to access my NextCloud remotely. I can't figure out which IP to use (Do I use my home IP, the Web GUI IP, or the Nextcloud jail IP)
Also cannot figure out which ports to use...

And lastly, do not know what the web address will be to access remotely.

Can someone help? I'm using a standard Xfinity router from Comcast and you can see what my options are in the attached image.

If you could very clearly just tell me what to fill in and then where to go to access it, I would greatly appreciate it!

 

[Bostjan]

Under Service Name you can write whatever you want. Name 'NextCloud' will give you descriptive meaning.

Leave TCP

Server IP Address should be your NextCloud IP (and should be set static in you server NOT DHCP).

Start port:80 (if you use encryption https use 443)
End port: 80 (if you use encryption https use 443)

the web address will be your IP provided from Comcast (I hope you have static IP).

 

[mrphillyblunt]

Under Service Name you can write whatever you want. Name 'NextCloud' will give you descriptive meaning.

Leave TCP

Server IP Address should be your NextCloud IP (and should be set static in you server NOT DHCP).

Start port:80 (if you use encryption https use 443)
End port: 80 (if you use encryption https use 443)

the web address will be your IP provided from Comcast (I hope you have static IP).

Thanks for your reply. So, I will be using the Nextcloud jail IP, like 10.0.0.X?

Also, when I go to the web address, can you type out an example for me? What exactly would I type into my search browser to access the Nextcloud port remotely?

 

[Bostjan]

Yes, IP of the jail. See attatchment; jail with name FreeBSD has IP 192.168.1.120.

Find out what is your IPv4 address from Comcast
for instance here
https://www.whatismyip.com/
or here
http://www.ip-adress.eu/

then type in browser http://YOURIP/

 

[garm]

First you need to figure out if you have a public IP or not.
Go to http://whatismyipaddress.com/ and compare the address they tell you with the address you are being told is your WAN in your router.

If those match then the next step is to set up the port forward. Tell the router to forward port 80 to the port being used by nextcloud and the ip of your nextcloud jail. You have now let the entire world in to your network :)

The next step is to set up a domain. If your WAN ip gets rotated by your ISP then you need to run something like dyndns that will constantly update the IP information. Otherwise you simply buy a domain from any dealer and set up a DNS pointer to your WAN ip.

Now to protect yourself there are some steps you can take. I’ll assume you do all the security hardening recommended from nextcloud but there are more. I would recommend not to run the router your given by your ISP but invest some time in something with some better control, like pfsense. That way you can easily separate you normal devices from those being exposed to the internet. Another step I would recommend is to buy a VM from a provider you trust and set up a reverse proxy. That way you can further limit the connections you need to accept on your home network.

 

[mrphillyblunt]

Got it! Thanks so much, guys!

The address I went to is my.personal.ip:80

 

[Jailer]

Next up, a visit from @RussianMafia ...........

 

[danb35]

Next up, a visit from @RussianMafia ...........

Probably, but at least the exposure is limited to whatever is in Nextcloud. Enabling SSH would sure be a good idea...

 

[nightshade00013]

Since no one mentioned it, a lot of ISP's tend to block inbound port 80 unless it's a commercial account. So you may end up needing to do a little fancy forwarding to make it work correctly.

Check out the link below and see if the tool can contact you, if not you will have some work to do.

http://canyouseeme.org/