RE: What features shall be handled by SLiMP3 andwhat features shouldn't?

Jason Snell <jsnell-AANFnQOTzEpWk0Htik3J/[email protected]> Mon, 17 Feb 2003 16:55:24 -0800
Newsgroups gmane.music.equipment.slimp3.dev
Message-ID <p0600060eba7734c1c07b@[10.0.1.31]>
To follow up my TiVo analogy... it's a similar issue, I think.

from http://tivo.lightn.org/README

>SECURITY
>It is a very bad idea to make a tivo IP accessable on the internet.  Telnet
>has no authentication and a DOS attack can easily crash a tivo.  Even IP-based
>access control can be bypassed by simple packet forging.  TivoWeb-TCL does
>provides basic authentication services by setting a username and password in
>tivoweb.cfg.  If you use this option you should make sure to only allow port
>80 through to the tivo from known IPs at the router/firewall level.  That is
>probably sufficient protection for tivoweb.  However a much better option is
>to use apache (or IIS) as an authenticating proxy to your tivo.  Below are
>instructions on how to set that up.  And an SSL authenticating proxy is even
>better but can be difficult to setup depending on the OS/distribution used.
>
>PROXY CONFIGURATION
>Here is a sample configuration to make your apache server an authenticating
>proxy to the tivo.  You will need some understanding of configuring an apache
>web server to be able to use this.  This will let you access tivoweb from a
>browser by going to http://www.domain.tld:8080/.  Use 'htpasswd
>/etc/apache/passwd <username>' to add/edit user's logins.
>
><VirtualHost *>
>ServerName www.domain.tld
>...
></VirtualHost>
>
>NameVirtualHost *
>
>Listen 80
>Listen 8080
>
><VirtualHost *:8080>
>ServerName www.domain.tld
>DocumentRoot /var/www
>ServerAdmin [email protected]
>
>ProxyPass / http://tivo/
>ProxyPassReverse / http://tivo/
>
><Location />
>AllowOverride None
>AuthType Basic
>AuthName tivo
>AuthUserFile /etc/apache/passwd
>require valid-user
></Location>
></VirtualHost>
>
>You may also need to uncomment mod_proxy in the load modules section of you
>apache configuration file.
>
>If you want to proxy the tivo from a subdirectory of your main site you will
>need to change the the following lines in your apache configuration and
>tivoweb.cfg file.
>
>Apache config:
>ProxyPass /tivo http://tivo/
>ProxyPassReverse /tivo http://tivo/
><Location /tivo>
>
>tivoweb.cfg:
>Prefix = tivo

-- 
Jason Snell / Editor, Macworld / jsnell-AANFnQOTzEpWk0Htik3J/[email protected]
415-243-3565 / AIM-iChat: MW jsnell

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Get 128 Bit SSL Encryption!
http://us.click.yahoo.com/FpY02D/vN2EAA/xGHJAA/rIp0lB/TM
---------------------------------------------------------------------~->

To unsubscribe from this group, send an email to:
[email protected]

 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/