My boy wants to host his own Minecraft server over Lan (so tunnel with VPN) so that he can play Minecraft with his friend. Now the problem is that I don't want him to host a server here even if it only happens via a VPN, because such a VPN can still get viruses from another computer (e.g. From a friend) to his computer because the VPN doesn't recognize it which data can be exchanged in the VPN. This is too unsafe for me and I have therefore thought about something how to disconnect your computer from our home network but still have an internet connection. Does any of you have a suggestion how I can do this? (preferably without DMZ or guest access)
A server to play with a friend? There are better options like Aternos. It's free, you always have to start the server briefly.
You are right, Tunngle or Hamachi or whatever they are called can make your network insecure…
Therefore allow your son to host directly via port sharing, because this is much safer, since only one port (especially 25565) is required and no other service, except the server listens on this port…
So this is much safer than opening a VPN for "unknown"…
the dangerous ports to protect are specifically port 21 and all under 1024.
Nothing is really dangerous about that, because you have to start a special software (in this case the server) that then listens to the ports - and your router prevents intruders from entering various ports that you have not released. It is the firewall to the outside, so to speak…
I hope that can calm you down a bit, because your son has probably already asked if he shouldn't host via port sharing…
the alternative of avoiding everything is renting… But that costs monthly…
greeting
the user
You can simply set up the server, use a DynDNS domain and forward the port for Minecraft.
Besides you can't configure everything