# Security Caveat: Locked out of my server while traveling

DevFeed: [Security Caveat: Locked out of my server while traveling](<https://devfeed.tech/articles/security-caveat-locked-out-of-my-server-while-traveling-32362.md>)

Original publisher: [Read original article](<https://joshtronic.com/2026/08/30/security-caveat-locked-out-server-travel/>)

Author: Josh Sherman

Published: 2026-08-30T00:00:00Z

Content type: opinion

Language: en

Sources: [Josh Sherman](<https://devfeed.tech/sources/josh-sherman.md>)

Topics: [Self-hosted](<https://devfeed.tech/topics/self-hosted.md>), [Security](<https://devfeed.tech/topics/security.md>), [Linode](<https://devfeed.tech/topics/linode.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [hosting](<https://devfeed.tech/topics/hosting.md>), [DDoS](<https://devfeed.tech/topics/ddos.md>)

Tags: [command](<https://devfeed.tech/tags/command.md>), [ddos](<https://devfeed.tech/tags/ddos.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [hosting](<https://devfeed.tech/tags/hosting.md>), [linode](<https://devfeed.tech/tags/linode.md>), [security](<https://devfeed.tech/tags/security.md>), [self-hosting](<https://devfeed.tech/tags/self-hosting.md>)

## AI overview

A personal account of being unable to access a self-hosted server while traveling because firewall rules restricted services and ports to specific IP addresses. The author describes using Linode's web-hosted shell to add a temporary nomadic IP address to the allow list, then plans to remove it afterward.

## Source excerpt

I'm still on my self-hosting kick as of late, while also questioning my life choices around hosting my own git forge. The last week or so has included what appears to be a DDoS attack rather than some coordinated scraping effort by a sketchy LLM company. Open source will prevail, even if I'm being stubborn about giving in and setting up Anubis. WordPress has been its own other adventure, but this isn't meant to be a post about those security caveats. I'll save those for another week. The current dilemma is that I'm far from home, ~30 hours away up in Rhode Island. I'm sitting at Audrey's Coffee House & Lounge, where it was a bit too early to order a BLT. As I sat down to knock out a quick blog post, I realized very quickly that I didn't think things through as well as I had thought. I keep my servers pretty well hardened, including but not limited to limiting access to certain services / ports to specific IP addresses. This tends to not be much of a problem. I do a lot of work from the house, which in itself is a problem I want to remedy in the near future. I also boss agents around remotely, but they are all homebodies as well. Since I like to stay as close to the server as possible, I try to not introduce managed services except where I feel it's absolutely necessary. In this scenario, I use iptables via the ufw command. I don't run a large enough fleet that I'd feel like leveraging Linode's firewall would be beneficial. Path of least resistance today would be to simply compose a blog post and get it live when I'm back home. Could probably just ask one of my friendly robots to take the markdown file and get it out there for me too. But alas, I would prefer to figure out how to pull this off, then blog about it. All while thinking through alternatives so future Josh can look back at this post and ask, "so why didn't you actually do anything you talked about in this post?" This dance probably looks about the same with most modern VPS hosting providers, but my story