Locking down ARC to one external ip

[mjw]

You wish to review this thread, among others.

Security with Roon ARC / Roon 2.0

Roon authenticates your user credentials and uses an encrypted transport. No unintended users can access your Roon. If Roon is not running, then no one listens on the port that is forwarded, so nothing external can access anything inside your network. It’s like a phone number that never answers. If somehow you already had rogue/malicious software on your network, it could access your network freely and it doesn’t need to open ports at all. It can tunnel traffic from the outside to the inside …