↑↓ choose · ↵ open · Esc close
Under “Rules” you decide per network who may reach what. The page has two lists: the devices in the network, and the local networks including the internet through the exit.
The editor asks for a name, who the rule covers (all devices or single ones), where it applies and what is allowed. If something is missing, the field says what.
A group is a name with the devices in it; a device may be in several. In a rule you pick groups like single devices, for example “Office → Server, port 22 only”.
The test card below the lists answers beforehand whether a device may reach a target. It names the rule that decides and the path it would take.
Rules protect against mistakes and against devices that cannot sign. They do not protect against a person holding a device with an approval key of your account.
Everything step by step, for every platform:
Then the default applies. On the first save it becomes rules in the network, and you can adjust it or restore the default.
Simple rules are free.
Your devices reach each other under simple names and fixed addresses, end-to-end encrypted and only among themselves. You do not need to open anything on your router.
You reach the NAS, printer or camera at home from anywhere through one of your computers as the gateway. The devices in the home network do not need DeskRanger.
On hotel or café Wi-Fi you go online through one of your own computers, as if you were at home. The path there is encrypted, with no third-party VPN provider.