Here's my problem:

 

I love PLEX media server. Ultimately, I want to have PLEX media server running on my Unraid box on IP address (192.168.1.10) port 32400.

 

I would like to have access to my PLEX media server remotely without making my unRaid vulnerable to security threats (and outside attacks). My knowledge of Linux and Networking is novice, at best.

 

Right now, I circumvent anyone accessing unraid directly by simply mounting my movies share into a PC connected to the LAN (192.168.1.5), and running PLEX media server on that PC (port 32400). Then I open port 32400 on my WAN (Public IP address) and when forward port 32400 in my WAN to 192.168.1.5 on my LAN (which redirects to the PC running PLEX media server). With this set up, I figure, nobody can directly access Unraid easily, and at best the exposure from the outside is to my LAN connected PC.

 

This got me thinking, whether it might be possible to mirror an internal IP address of sorts. For example, would it be possible for me to mirror my unraid's PLEX ip address (192.168.1.10:32400) to a "dummy internal IP address with a dummy port" like 192.168.1.150:80, and then use that as the redirect point for external traffic so that I protect my "actual" unRaid IP address from any attack?

 

  Forgive me if this is a beyond stupid proposition, and I am not a person well versed in networking so this is me just thinking out of the box of a way through which I might be able to protect my server.

 

  Some have suggested using a VPN -- but I am not sure how I would go about doing this. Is there a tutorial out there for this?

Google IPsec.