Any known security risks while using web scheduling?

[reefboy]

So I'm about to set up the web scheduling so I can do it from work or any where. I have all critical security patches installed on the computer. Do I need to be concerned with using port forwarding to that computer? Am I putting the computer at unnecessary risk of being hacked?
Is it better to log in to the router and set up the port forwarding right before needing access and then turning off the port forwarding afterward? Or is this being overly cautious?

[sub]

I'm not aware of any issues with the builtin webserver, but whenever you place a computer on the internet there is risk.

Luckily the builtin cassini web server is a pretty simple piece of code which doesnt try to do too much, which equates to less places for likely security holes.

By default its listening on a nonstandard port, which helps, though you may or may not wish to move it to another port. Also, I recommend accessing it via port forwarding from a router/firewall for extra security.

If you're really worried about security, you could setup Apache as the web server, configured to do a proxy-pass to the built in webserver. Apache has been well used and tested by millions, and would do a good job of filtering out any nasties...

[capone]

All your bases belong to us