Unrecognized IP addresses trying to access to my HA instance public through Cloudflare Tunnel

Configuration
1

Hi everyone,

I’m pretty new to HA. Recently I decided to convert my rented apartment to semi-smart, so I installed HA OS in a VM on an old MacBook Air 2017. Currently, there is only one custom device for temperature, humidity, CO2, and PM1/2.5/10 working with ESPHome.

I found how to make it public with Cloudflare Tunnels so I can access it from outside but now I’ve started seeing IP addresses trying to connect and being banned eventually but…

My config:

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 172.30.33.0/24
  ip_ban_enabled: true
  login_attempts_threshold: 3

Yes, they are banned but I’m not sure if this is even good. I bought a random domain for this purpose only and again it’s found. I will add 2FA for more security. But I don’t like this a lot someone trying to access my instance even though there is nothing they can control for now but from there they may be accessing my local network or something else.

So my question is there anything I can do to limit these attempts to access? Also as I’m thinking of extending the devices in the future is there a way to secure myself for the future like separating everything related to smart home to a separate VLAN (I don’t know how can I do it it but will learn :smiley: ).

I’m pretty new and open to recommendations.

Thanks in advance! :slight_smile:

1 Like
2

Nope. You cannot stop someone from trying to to knock on your front door.

And in the modern Internet bots are continually scanning ip space looking for vulnerable targets.

Basically if you put a door there - someone’s gonna knock. Period. There’s simply nothing you personally can do about that. Your choice is to accept the risk and. Mitigate potential intrusion (like youre doing with cloud are and a secure - two or more factor Credentials)

There’s plenty of generic security practices for HA but to your direct question. No.