Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Deunan Knute on May 30, 2003, 04:13:13 PM
-
Hello all..
My office is running on a relatively slow DSL service 384k/128k, it's on dynamic IP, so I subscribe to dyndns.org to solve that problem.
Now I need to manage the SME server from home where I'm on a dial-up 56k, I keep getting error that I'm forbidden to access the server manager. The problem lies I think on the specification of a specific IP address that would be allowed into SME via SSL, that's inside the Security -> Remote Access part of the server-manager.
Problem now is that I'm dial-up 56k and the IP changes too. Is it possible to specify an IP address that allows any address from the internet?
Please guys, what should I do? At least point me to the right direction
TIA and sincere regards to all
Deunan
-
Sure, in Remote Access allow Network 0.0.0.0 and Subnet Mask 0.0.0.0 which will allow any host to connect.
-
Ahh!!
Danke! Danke! Vunderbar!
I am really a dumbkopf! Thanks for the heads-up!
-
so now I can access you server too?... ;-)
-
Oh no!
Oh alright, maybe what I'll do, I'll look up my ISP's block of IP Addresses and specify 'em manually.. I should do my homework and not take easy way out! ;-)
But a big THANKS to Terry and RequestedDeletion for the assist! ;-)
-
guestHH wrote:
>
> so now I can access you server too?... ;-)
Well Mitel provide a managed product, how do they securely access your box?
-
I don't know for I do not use the commercial version and it's services. But I guess they use IPSEC for that, and a lot of MX thingies between Mitel and the customer to be a backup. I dont think they really 'access' the server but more providing services that the Mitel server can use.
-
Have I understood this correctly or not ?
If one uses these settings
in Remote Access allow Network 0.0.0.0 and Subnet Mask 0.0.0.0 which will allow any host to connect
This will allow anyone to be "able to connect" to your server manager but they
still need to have the admin password to open server manager. Sure, this is like leaving the gate to your property wide open, but you still have to get in through the locked front door (admin password req'd). ??
Feedback please
Thanks
Ray
-
Oh, and another way to allow safe external access to server manager is to login via a VPN connection and then open server manager as if you were a local user.
http://serverIP:980
Ray
-
Or to SSH in as admin and access the server manager via option 6.
Rayy Mitchell wrote:
>
> Oh, and another way to allow safe external access to server
> manager is to login via a VPN connection and then open server
> manager as if you were a local user.
> http://serverIP:980
>
> Ray
-
Ray,
yes, 0.0.0 will open up the server manager for the complete internet. A password is required but there is no mechanism to lock out 'too many attempts' .
VPN is the best way, but I have issues with VPN with 5.6U4. So I use ssh like Trevor metioned.
Use a precise IP with subnet 255.255.255.255 to allow only _that_ specific IP address.
Regards,
guestHH
-
shhhh! the secret is ssh.