Quote Originally Posted by al37919 View Post
It is better and safer to create an ssh tunnel into your lan, using which you can connect from everywhere to your lan-web server without opening it to wan. So the only port which you really need to open to wan is ssh which is believed to be reasonably safe.
Well, you could connect to that ssh tunnel if wherever you were at when you were not at home allowed for an outgoing telnet or ssh connection.

In the context that I am thinking, however, one is constrained to a web interface.