How does Back to My Mac (BMM) work from a technical standpoint? Is it creating a VPN for all of your registered .mac computers?
It has to have your router set to use NAT Port Forwarding. Say you have File Sharing (port 548) open on your home computer behind an Airport Extreme and want to access it from work. Does BMM set the Airport Extreme to forward any incoming request on port 548 to the home mac? Or does it set a rule to only allow the IP addresses of the other registered .mac computers? Or is it doing something completely different that I don't understand.
I think this is a great feature, although extremely flakey right now, but I would like to have a better understanding of how it works so that I can make some intelligent security decisions about using it.
kman