Topic: Access server-manager via internet Help!

[Deunan Knute]

Hello all..

My office is running on a relatively slow DSL service 384k/128k, it's on dynamic IP, so I subscribe to dyndns.org to solve that problem.

Now I need to manage the SME server from home where I'm on a dial-up 56k, I keep getting error that I'm forbidden to access the server manager. The problem lies I think on the specification of a specific IP address that would be allowed into SME via SSL, that's inside the Security -> Remote Access part of the server-manager.

Problem now is that I'm dial-up 56k and the IP changes too. Is it possible to specify an IP address that allows any address from the internet?

Please guys, what should I do? At least point me to the right direction

TIA and sincere regards to all


Deunan

[Terry]

Sure, in Remote Access allow Network 0.0.0.0 and Subnet Mask 0.0.0.0 which will allow any host to connect.

[Deunan Knute]

Ahh!!

Danke! Danke! Vunderbar!

I am really a dumbkopf!  Thanks for the heads-up!

[guestHH]

so now I can access you server too?...

[Deunan Knute]

Oh no!  

Oh alright, maybe what I'll do, I'll look up my ISP's block of IP Addresses and specify 'em manually..  I should do my homework and not take easy way out!  

But a big THANKS to Terry and RequestedDeletion for the assist!  

[s b]

guestHH wrote:
>
> so now I can access you server too?...

Well Mitel provide a managed product, how do they securely access your box?

[guestHH]

I don't know for I do not use the commercial version and it's services. But I guess they use IPSEC for that, and a lot of MX thingies between Mitel and the customer to be a backup. I dont think they really 'access' the server but more providing services that the Mitel server can use.

[Ray Mitchell]

Have I understood this correctly or not ?
If one uses these settings
in Remote Access allow Network 0.0.0.0 and Subnet Mask 0.0.0.0 which will allow any host to connect

This will allow anyone to be "able to connect" to your server manager but they
still need to have the admin password to open server manager. Sure, this is like leaving the gate to your property wide open, but you still have to get in through the locked front door (admin password req'd). ??

Feedback please
Thanks
Ray

[Ray Mitchell]

Oh, and another way to allow safe external access to server manager is to login via a VPN connection and then open server manager as if you were a local user.
http://serverIP:980

Ray

[Trevor B]

Or to SSH in as admin and access the server manager via option 6.

Rayy Mitchell wrote:
>
> Oh, and another way to allow safe external access to server
> manager is to login via a VPN connection and then open server
> manager as if you were a local user.
> http://serverIP:980
>
> Ray

[guestHH]

Ray,

yes, 0.0.0 will open up the server manager for the complete internet. A password is required but there is no mechanism to lock out 'too many attempts' .

VPN is the best way, but I have issues with VPN with 5.6U4. So I use ssh like Trevor metioned.

Use a precise IP with subnet 255.255.255.255 to allow only _that_ specific IP address.

Regards,
guestHH

[Pete Edwards]

shhhh! the secret is ssh.