TheWeirdSpark

This is an amazingly detailed explanation. Thank you kind sir. I think I will add a rasberry pi or similar device into the mix between my server and the rest of the network (yes my server is in my house) and block any inbound traffic on that. My server will of course also have a security measure, I'm just making sure my network is double secure in case someone does gain root access to it. Thank you so much. Wash your hands!

It's not so much about remote access. I need to seperate my server from my network/not have it be allowed to access it, while still allowing it to answer queries coming from inside my network. Preferably in software. To answer, I would be running Linux on the server.

This is all still theoretical (I may be using present tense but I don't actually have anything here yet): Basically I need to be able to access my server from my main network. But since it is connected to the internet directly with tons of open ports etc. I would like to set my network up in a way to not allow my server to access all my other devices. I.e. Allow an answer from the server but not let the server initiate a connection. So I have (or will have): A MikroTik CRS305 10Gbit switch My server My router for my home network. An idea has been stated on reddit to put my server into a subnet and block it with a firewall that will establish a connection only when initiated by a client. Question: Would this even be a viable solution and how do I go about setting this up. Is it possible in software with something like pfSence? Do I need to buy any more hardware to get this working? PS: I am not planning on buying anything until I've got this all figured out. Thanks everyone in advance.

Yeah I suspected this (honestly wouldn't make sence otherwise). But I wanted to be sure before I go out and buy something and then have to pay return shipping because I was just being an idiot.

I'm not new to seeing 900 down (have 1gbit) but symmetrical is impressive (get 50 up).

Basically my question is if a switch extends the routers integrated switch or if it creates its own seperate lan. So I'm running out of LAN ports on my router which makes me want to buy a switch. My problem is that my router handles all the wifi stuff because I have mesh set up nicely and all those sweet wireless shenanigans. But I still need my dive es (like my phone, laptops, everything over wifi) to be able to access the devices on my switch (eg my NAS and Media server). So can I just attach a switch no problemo or do I have to have the wifi routed over the switch with new access points etc.?

Stupid question but have you checked your router settings? I don't know what you use but maybe there's an option for your PC to run in kind of an exclusive mode (though I have no idea why) that's the only thing I can think of dude.