Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: asterof on January 24, 2007, 01:34:10 AM

Title: Change remote access settings
Post by: asterof on January 24, 2007, 01:34:10 AM
Remote Management
It is possible to allow hosts on remote networks to access the server manager by entering those networks here. Use a subnet mask of 255.255.255.255 to limit the access to the specified host. Any hosts within the specified range will be able to access the server manager using HTTPS.

 
There are no entries yet
To add a new remote management network, enter the details below.
 
I want to be able to access the server-manager from over the Internet
from any computer. I dont fully understand this setting
Can someone help
Thanks
Title: Re: Change remote access settings
Post by: william_syd on January 24, 2007, 01:58:06 AM
Quote from: "asterof"

 
I want to be able to access the server-manager from over the Internet
from any computer. I dont fully understand this setting
Can someone help
Thanks


Use 0.0.0.0 and 0.0.0.0
Title: Re: Change remote access settings
Post by: gordonr on January 24, 2007, 08:28:55 AM
Quote from: "william_syd"

Use 0.0.0.0 and 0.0.0.0


Though possible, I would advise strongly against this. In my view, you should only allow remote server-manager access from a very limited set of fixed IP addresses.

If you really need to access the server-manager from everywhere, I would suggest using key-based SSH plus a port-forward.
Title: Re: Change remote access settings
Post by: robwellesley on January 25, 2007, 01:28:26 PM
Quote from: "gordonr"


Though possible, I would advise strongly against this. In my view, you should only allow remote server-manager access from a very limited set of fixed IP addresses.


Why?  Surely a robust Admin password in conjunction with an ssl conection is as secure as Internet Banking?

Rob
Title: Re: Change remote access settings
Post by: gordonr on January 25, 2007, 10:38:50 PM
Quote from: "robwellesley"

Why?  Surely a robust Admin password in conjunction with an ssl conection is as secure as Internet Banking?


Well, not really:

- There is a known username
- There is no restriction on bad login attempts
- We use a self-signed SSL certificate - this can be spoofed/hijacked. This one can be solved by purchasing and installing a commercial certificate