Port Forwarding Web Access but no App Access

[Jimmycooker]

Hi, the way I've setup port forwarding means I can access my version 1 mini server via the web but not via the android app. Can anyone help?

[inswe]

Please don't do that. The Miniserver v1 doesn't even support SSL, so your password is transmitted unencrypted. Everyone will advise against port forwarding here, set up a VPN instead. With a miniserver V1 there are no alternatives, with V2 it looks a little different.

Again: don't do that! Delete the fowarded port!

[Jimmycooker]

That sucks, so the way it's described by loxone is not safe? There's no way to use the app remotely for the v1?

[inswe]

Yes, there is. As I just mentioned, you could set up a VPN tunnel. Many routers, such as the Fritzbox, which is very popular in Germany, offer the option of simply configuring a VPN tunnel. In this way, your mobile phone, tablet or notebook establishes a secure connection to your router from foreign locations, so that the respective device is practically in the home network. You can access your miniserver via web or app. As far as I know, there are also instructions in the wiki on how the mobile phone automatically establishes a VPN connection if you want to use the Loxone app.

[Jimmycooker]

Ok thanks for the info, I'll see can I do it that way. Thanks again

[eisenkarl]

Or use nginx proxy

[Christian Fenzl]

To answer the initial question:
If you have established web access port forwarding, the App also should work, as this uses the same http port.

Furthermore a little correction of other options in here, the App and web interface uses encryption also on MS V1 (but not TLS), so no passwords or data are submitted in clear text.

BUT Miniserver V1 (and V2 too) accepts basic authentication on the same port, therefore someone may brute-force your password, or simply denial-of-service attack your Miniserver until it reboots.

Also, to clarify, also TLS of MS V2 isn’t a safe guard against brute-force and dos attacks, as the difference only is that the brute-force/dos attack is encrypted.

Thats why you should use VPN.