Originally Posted by
al37919
It is better and safer to create an ssh tunnel into your lan, using which you can connect from everywhere to your lan-web server without opening it to wan. So the only port which you really need to open to wan is ssh which is believed to be reasonably safe.