Re: WAN initialization??

"corvelay" <[email protected]> Tue, 15 Mar 2005 01:34:38 -0000
Newsgroups gmane.comp.web.pixory
Message-ID <[email protected]>

Maybe I should clarify my last question - 

I don't think my ISP and shared hosting environment will allow me to
set java system properties, unless maybe there is a way to do this
through tomcat or web.xml configuration files.

I'll check and see if tomcat allows this - unless someone out there
knows if this is possible already with tomcat?

I also just tried to ssh to my ISP server and use lynx web browser at
the command line to go to the basic configuration page - it let me see
the page and enter the values, but couldn't process the submit.

Thanks again - Matt.


--- In [email protected], "Joe Panico" <pixory@y...> wrote:
> 
> Matt,
> 
> The wan initialization check is a security measure. Suppose that you
> install pixory, but before you complete the basic configuration page
> someone from the Internet navigates to Pixory. They too will get the
> basic Configuration page and will have an opportunity to complete the
> configuration and hijack the application.
> 
> So if Pixory has not yet been "initialized" (had the required fields
> on the basic configuration page filled in), it checks the ip address
> of all incoming requests and makes sure that the client belongs to the
> same lan as the server that is running Pixory. Here lan is defined by
> this subnet mask: 0.0.0.255. The idea is that all machines on the lan
> are friendly, whereas all machines outside the lan are hostile.
> 
> You turn off the above behaviour by using the flag I pointed out.
> 
> regards,
> 
> joe
> 
> --- In [email protected], "corvelay" <corvelay@y...> wrote:
> > 
> > 
> > Joe - 
> > 
> > thanks for pointing this out on the WAN issue - and btw, the css
> > stylesheet is exactly what I was looking for.
> > 
> > I am curious however what scenario activates the WAN error, since I
> > deployed the pixory.war file on my home server and didn't have any
> > security issues.  When deployed on my ISPs server I get the error?
> > The only difference is the version of tomcat(I'm on 5.x and the ISP is
> > on 4.x).
> > 
> > Thanks, Matt
> >





 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/pixory-beta/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/