Yes, but you'll have to do some reading up on VPNs.
Best to terminate your VPN on your modem/router, so you'll have to do some reading up on that too.
Most Android & IOS devices can start a VPN session, so more reading up to be done there.
Way out of the scope on a satellite forum, so try looking at some network expert sites.
To get back to your question (although this is probably the last thing you are worried about) have you downloaded the VU player app. You will not be able to play via a webpage on your phone. Well I cant on my iphone , not sure about android,etc.
Have you rebooted your router?
I've just turned on your box to prove the point.
Note time of screenshot.
Removed most of IP again so others don't find it as fast.
Screenshot from 2014-10-06 22:48:31.jpg
Whos ip address is this mine does not have 158 in it?
just remove port 80 from your port forwarding if you are worried about rouge access. On the VU app you just insert 8002 for the port with your wan ip address. You can tweak the transcoding set up via the remote.
Yes, no longer have access to it on port 80. If you left the streaming or any other ports open, someone will also find them soon.
Screenshot from 2014-10-06 23:02:48.jpg
And how would you suggest that the box is secured for openwebif access and streaming? Surely a password is the only way to do both? Or are you suggesting that even with authentication switched on for streaming the box would still be un-secure?