Topic: Cant access my SME9 outside of my local network

[guest22]

That would be an unwise thing to do.

0.0.0.0/0.0.0.0 would indeed be unwise for it would open up server manager access to the whole world. Hence the hint to read the admin manual, whilst get things going for now.

Any other reasons why it would be unwise to assign a specific IP/Mask, for it is a dedicated default feature?

[Orest]

@HF Nah it is not that challenging, and it is made in Albania language. Moslty it is based on sme server administration manual... but later maybe I can use it and some other work to make SME available in Albanian language.

@Charlie I know, I am just entering one specific IP not all 0.0.0.0/0.0.0.0.

Thank you both,

[CharlieBrady]

@Charlie I know, I am just entering one specific IP not all 0.0.0.0/0.0.0.0.

That's a much better idea.

[Orest]

Hello,

Where is the configuration file to modify the allowed networks for remote access through command line (ssh)?

[guest22]

ssh allowed networks is all or none

config show sshd

Or you can use this http://wiki.contribs.org/SSH_Public-Private_Keys

[Orest]

Maybe I was not clear RequestedDeletion. I want know if I can modify the remote management networks with putty(ssh) so I can allow a specific IP, and than I can access https://my-static-IP/server-manager/ with this IP.

Thanks

[Orest]

In other words I want to allow my work network to access web-based server manager but I can not since the IP is not allowed, but I can access my server with ssh.
 

[guest22]

If can ssh in, you can enter the 'console' command and select access server manager text based.

[Orest]

Thanks man ... Also I appreciate If you tell me the configuration file location for this part.
It is possible to allow the a specif IP without using the "console" command, right?

Respect,

[Orest]

I know it is pointless, but I am at learning phase 

[guest22]

config show httpd-admin

will show you all the options for server manager

server manager is a apache vhost and the config options for that are build by a signal-event based on templates and db variables. Direct changes httpd.conf will _not_ survive signal-events or updates.

[guest22]

config setprop httpd-admin ValidFrom 192.168.1.1/255.255.255.0,10.1.1.1/255.255.255.0

would grant access to server manager from 192.168.1.1 AND 10.1.1.1

then:
expand-template /etc/httpd/conf/httpd.conf
signal-event remoteaccess-update
service httpd-admin restart

Should do it

[Orest]

Ok I see,
I really appreciate the time you spent for me H.F, its clear I must go deeper with SME if I want some real understandings about this server.

I am going to make this post as [SOLVED]

See ya in my next post.

Thank you all,
Regards

[Orest]

Can I make my post [SOLVED]?

[guest22]

Yes, you can. Modify your very first post and change the title.