Difference between revisions of "Outside Access"

From LinuxMCE
Jump to: navigation, search
m (Explicit checkbox text)
Line 3: Line 3:
  
 
[[Image:OutsideAccess.jpg|thumb|200px|Outside Access Admin Page]]
 
[[Image:OutsideAccess.jpg|thumb|200px|Outside Access Admin Page]]
−
If both of these boxes ("Allow outside access to the website" & "... on port (-port#-)") are unchecked, then it will not be possible for anyone to access any part of your system from outside the home unless you manually make changes to the firewall in the Advanced section.
+
In the [[LinuxMCE Admin Website]]-->Advanced-->Firewall section, both of the following boxes must be checked to allow users to access your system from outside the home:
  
−
Check the first box if you want to be able to access the LinuxMCE Admin website from outside your home. Once checked, you will be able to go to any internet browser anywhere and go to the URL <nowiki>http://youripaddress/pluto-admin</nowiki> to reach the site.
+
*"Allow outside access to the website"
 +
*"... on port (-port#-)")
  
−
==2 Potential Problems==
+
They are disabled by default at installation, for security reasons.
−
===Knowing your IP Address===
+
−
The first is that to access your home system you need to know the ip address that globally identifies your computer, and put it in the "youripaddress" on the URL.  But most residential DSL and cable internet services do not provide their customers with a static ip address--it changes all the time.  To fix this problem, a domain name should be assigned to the core. This can be done by going to [http://dyndns.org/ dyndns.org] and creating an account and domain name for this machine. The username and password you created at dyndns.org can be entered into the web admin, so that if it changes, the core will automatically contact DynDNS to update its information appropriately.  
+
  
−
This can be changed from '''Advanced > Network > Dynamic DNS Settings'''
+
==Accessing the Admin page from the Internet==
 +
Once checked, you will be able to access the Admin Website from any browser of the Internet using the the URL:
  
 +
:*<nowiki>http://youripaddress/pluto-admin</nowiki>
 +
 +
::where youripaddress is either the actual IP address of your home (in the format  ''223.244.16.155'') or is the domain name assigned to your home (such as ''www.myrobothouse.org'').
 +
 +
==Accessing the Web Orbiter from the Internet==
 +
 +
Similarly, You will be able to access the Web Orbiter from any browser of the Internet using the the URL:
 +
 +
:*''<nowiki>http://youripaddress/pluto-admin/weborbiter.php</nowiki>''
 +
 +
==Potential Problems==
 +
===Dynamic IP Addresses===
 +
The first is to identify your IP address for your home.  Most residential DSL and cable internet service providers do not provide their customers with a static IP address -- it changes all the time (a dynamic IP).  A free service called [http://dyndns.org/ dyndns.org] allows you to register a domain name for your home. DynDNS keeps a constantly updated database that links the registered domain name with an IP address. A background utility on your Core sends information to DynDNS whenever the IP address changes.
 +
 +
The username and password you create at dyndns.org can be entered from [[LinuxMCE Admin Website]]-->Advanced-->Network-->Dynamic DNS Settings.
 +
 +
Whenever your IP address then changes dynamically, the Core will then report the updated IP address to DynDNS, which will continue to link your domain name with the new IP address.
 
[[Image:dyndns_settings.png]]
 
[[Image:dyndns_settings.png]]
  
−
===Secure Connection===
+
===Connection Security===
−
The second problem is that if you check that box the connection will not be secure and it would be possible for someone to "listen" to your communication and intercept your password, thereby being able to control your house. To solve this you can obtain your own SSL secure certificate from a company like Verisign.  This is what banks and online merchants use to encrypt confidential financial transactions.  With a secure certificate you would access your web site with an "https://" instead--the s means secure.  Everything would be secure and encrypted using the same method you use to access online banking and other secure sites. However setting up your own secure certificate can be costly and complicated.
+
Connections to LinuxMCE from the Internet are not intrinsically secure, since data is sent as plain text. It would be possible for someone to "listen" to your communication and intercept your password and thereby be able to control your house.
 +
 
 +
To solve this you can obtain your own SSL secure certificate from a company like Verisign.  (This is what banks and online merchants use to encrypt confidential financial transactions.) With a secure certificate you could access your web site with an "https://" instead of "http://".  Everything would be secure and encrypted. However setting up your own secure certificate can be costly and complicated.
 +
 
 +
===Choosing the port===
 +
 
 +
You may find that your ISP blocks incoming connections on port 80. (Port 80 is the port internet browsers use to connect to a web server.)
 +
 
 +
Try changing the port from 80 to something else, like 3080. You would need to access your web site like this:
 +
 
 +
:*''<nowiki>http://youripaddress:3080/pluto-admin</nowiki>''
 +
 
 +
===Allow outside access===
  
−
If you do check the box to allow outside access, you may find that even if you know your ip address you still cannot access your server because your ISP blocked incoming connections on port 80.  Port 80 is what internet browsers use to connect to a web server.  You can try changing the port from 80 to something else, like 3080.  If you do, then you will need to access your web site like this: <nowiki>http://youripaddress:3080/pluto-admin</nowiki>.  If that still doesn't work, you may need to talk to your ISP.
+
The '''Allow outside access''' was mainly used for Pluto tech support to be able to help configure systems or troubleshoot problems.  
  
−
The '''Allow outside access''' is mainly used when you want tech support to be able to help you configure or troubleshoot. There is no 'back door' to LinuxMCE, and LinuxMCE staff have no way to connect to your system unless you check this box. 
+
'''Although this Feature is still an Option, LinuxMCE does not offer Tech Support.'''
  
−
'''This Feature is still an Option but LinuxMCE does not offer Tech Support'''
+
Note: There is no 'back door' to LinuxMCE. No remote access is allowed if this box remains unchecked.
  
−
If you request tech support and you want to allow LinuxMCE to access your system, check the box and then type in a password. You will then give the support rep the password, and with that password, the support rep will be able to login to your system, inspect the logs, look at your configuration, and run diagnostics.  As soon as you uncheck the box or change the password the connection your Core will immediately drop the connection and the support rep will not have access anymore.  When you enable remote access, the connection the support rep uses to access your system is secure and encrypted using a protocol called SSH.
+
To allow remote access, the box would be checked and a password entered. A remote user would need to enter the password to login.  As soon as you uncheck the box (or change the password) the Core will immediately drop the connection.  Remote access connections are encrypted using SSH and therefore are secure.

Revision as of 06:57, 22 May 2008

Outside Access Admin Page

In the LinuxMCE Admin Website-->Advanced-->Firewall section, both of the following boxes must be checked to allow users to access your system from outside the home:

  • "Allow outside access to the website"
  • "... on port (-port#-)")

They are disabled by default at installation, for security reasons.

Accessing the Admin page from the Internet

Once checked, you will be able to access the Admin Website from any browser of the Internet using the the URL:

  • http://youripaddress/pluto-admin
where youripaddress is either the actual IP address of your home (in the format 223.244.16.155) or is the domain name assigned to your home (such as www.myrobothouse.org).

Accessing the Web Orbiter from the Internet

Similarly, You will be able to access the Web Orbiter from any browser of the Internet using the the URL:

  • http://youripaddress/pluto-admin/weborbiter.php

Potential Problems

Dynamic IP Addresses

The first is to identify your IP address for your home. Most residential DSL and cable internet service providers do not provide their customers with a static IP address -- it changes all the time (a dynamic IP). A free service called dyndns.org allows you to register a domain name for your home. DynDNS keeps a constantly updated database that links the registered domain name with an IP address. A background utility on your Core sends information to DynDNS whenever the IP address changes.

The username and password you create at dyndns.org can be entered from LinuxMCE Admin Website-->Advanced-->Network-->Dynamic DNS Settings.

Whenever your IP address then changes dynamically, the Core will then report the updated IP address to DynDNS, which will continue to link your domain name with the new IP address. Dyndns settings.png

Connection Security

Connections to LinuxMCE from the Internet are not intrinsically secure, since data is sent as plain text. It would be possible for someone to "listen" to your communication and intercept your password and thereby be able to control your house.

To solve this you can obtain your own SSL secure certificate from a company like Verisign. (This is what banks and online merchants use to encrypt confidential financial transactions.) With a secure certificate you could access your web site with an "https://" instead of "http://". Everything would be secure and encrypted. However setting up your own secure certificate can be costly and complicated.

Choosing the port

You may find that your ISP blocks incoming connections on port 80. (Port 80 is the port internet browsers use to connect to a web server.)

Try changing the port from 80 to something else, like 3080. You would need to access your web site like this:

  • http://youripaddress:3080/pluto-admin

Allow outside access

The Allow outside access was mainly used for Pluto tech support to be able to help configure systems or troubleshoot problems.

Although this Feature is still an Option, LinuxMCE does not offer Tech Support.

Note: There is no 'back door' to LinuxMCE. No remote access is allowed if this box remains unchecked.

To allow remote access, the box would be checked and a password entered. A remote user would need to enter the password to login. As soon as you uncheck the box (or change the password) the Core will immediately drop the connection. Remote access connections are encrypted using SSH and therefore are secure.

Retrieved from "http://wiki.linuxmce.org/index.php?title=Outside_Access&oldid=12153"