RE: What features shall be handled by SLiMP3 andwhat features shouldn't?
Jason Snell <jsnell-AANFnQOTzEpWk0Htik3J/[email protected]> Mon, 17 Feb 2003 16:55:24 -0800
| Newsgroups | gmane.music.equipment.slimp3.dev |
|---|---|
| Message-ID | <p0600060eba7734c1c07b@[10.0.1.31]> |
To follow up my TiVo analogy... it's a similar issue, I think. from http://tivo.lightn.org/README >SECURITY >It is a very bad idea to make a tivo IP accessable on the internet. Telnet >has no authentication and a DOS attack can easily crash a tivo. Even IP-based >access control can be bypassed by simple packet forging. TivoWeb-TCL does >provides basic authentication services by setting a username and password in >tivoweb.cfg. If you use this option you should make sure to only allow port >80 through to the tivo from known IPs at the router/firewall level. That is >probably sufficient protection for tivoweb. However a much better option is >to use apache (or IIS) as an authenticating proxy to your tivo. Below are >instructions on how to set that up. And an SSL authenticating proxy is even >better but can be difficult to setup depending on the OS/distribution used. > >PROXY CONFIGURATION >Here is a sample configuration to make your apache server an authenticating >proxy to the tivo. You will need some understanding of configuring an apache >web server to be able to use this. This will let you access tivoweb from a >browser by going to http://www.domain.tld:8080/. Use 'htpasswd >/etc/apache/passwd <username>' to add/edit user's logins. > ><VirtualHost *> >ServerName www.domain.tld >... ></VirtualHost> > >NameVirtualHost * > >Listen 80 >Listen 8080 > ><VirtualHost *:8080> >ServerName www.domain.tld >DocumentRoot /var/www >ServerAdmin [email protected] > >ProxyPass / http://tivo/ >ProxyPassReverse / http://tivo/ > ><Location /> >AllowOverride None >AuthType Basic >AuthName tivo >AuthUserFile /etc/apache/passwd >require valid-user ></Location> ></VirtualHost> > >You may also need to uncomment mod_proxy in the load modules section of you >apache configuration file. > >If you want to proxy the tivo from a subdirectory of your main site you will >need to change the the following lines in your apache configuration and >tivoweb.cfg file. > >Apache config: >ProxyPass /tivo http://tivo/ >ProxyPassReverse /tivo http://tivo/ ><Location /tivo> > >tivoweb.cfg: >Prefix = tivo -- Jason Snell / Editor, Macworld / jsnell-AANFnQOTzEpWk0Htik3J/[email protected] 415-243-3565 / AIM-iChat: MW jsnell ------------------------ Yahoo! Groups Sponsor ---------------------~--> Get 128 Bit SSL Encryption! http://us.click.yahoo.com/FpY02D/vN2EAA/xGHJAA/rIp0lB/TM ---------------------------------------------------------------------~-> To unsubscribe from this group, send an email to: [email protected] Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/