A while ago, I ran a vino server inside my local wifi network, and the vino server wrote messages on stdout that some strange IPs from the Internet tried to connect to it. I wondered, "Is my server being Attacked". How can you secure your server on local and nonlocal, and public and private networks not under your control?
Is the following a possible idea?
Is there a way to make the server only accessible to the other processes running on the server host, and run
sshd on the server host to allow forwarded access? (I guess the idea from: https://help.ubuntu.com/community/VNC#SSH_port-forwarding. I don't quite understand how it is done and hope you could explain.)
Does this make other machines only able to connect to the server by using ssh and port-forwarding/tunneling?
Does this way make the server only accessible to the machines in the same local network or does is also allow machines outside the local network?
Is it a more secured way to access the server than making the server accessible to all the other machines in the local network? If yes, is it more secured because SSH is usually more secured than other protocols. (Such as the protocol used by vino?)