Re: WAN initialization??

Matt,

The wan initialization check is a security measure. Suppose that you
install pixory, but before you complete the basic configuration page
someone from the Internet navigates to Pixory. They too will get the
basic Configuration page and will have an opportunity to complete the
configuration and hijack the application.

So if Pixory has not yet been "initialized" (had the required fields
on the basic configuration page filled in), it checks the ip address
of all incoming requests and makes sure that the client belongs to the
same lan as the server that is running Pixory. Here lan is defined by
this subnet mask: 0.0.0.255. The idea is that all machines on the lan
are friendly, whereas all machines outside the lan are hostile.

You turn off the above behaviour by using the flag I pointed out.

regards,

joe

--- In [email protected], "corvelay" <corvelay@y...> wrote:
> 
> 
> Joe - 
> 
> thanks for pointing this out on the WAN issue - and btw, the css
> stylesheet is exactly what I was looking for.
> 
> I am curious however what scenario activates the WAN error, since I
> deployed the pixory.war file on my home server and didn't have any
> security issues.  When deployed on my ISPs server I get the error?
> The only difference is the version of tomcat(I'm on 5.x and the ISP is
> on 4.x).
> 
> Thanks, Matt
> 






 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/pixory-beta/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/