Author Topic: Access web admin from external IP (over the internet)?  (Read 1414 times)

jondecker76

  • Alumni
  • wants to work for LinuxMCE
  • *
  • Posts: 763
    • View Profile
Access web admin from external IP (over the internet)?
« on: February 25, 2008, 03:29:17 am »
I would like to have access to my web admin from an external IP (over the Internet). I have my home IP address, and port 80 forwarded to my core from my DSL modem - but for some reason I can't get in.

Is there a setting that has to be enabled somewhere in the admin?

Also, I am aware of the security risks involved, its not something I plan on doing permanently.

thanks,
Jon

darrenmason

  • Addicted
  • *
  • Posts: 529
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #1 on: February 25, 2008, 03:59:20 am »
Try a different port. Some internet providers (at least mine) don't like you running your own web server unless you pay them more I guess.

I set a port forward from another port (eg: 8080) to port 80 on my core and that worked fine.

Regards
Darren

colinjones

  • Alumni
  • LinuxMCE God
  • *
  • Posts: 3003
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #2 on: February 25, 2008, 06:47:06 am »
Even more basic than that, maybe a stupid question, but I know you have been screwing around with your firewall, etc. Have you actually enabled port 80 on the Core's firewall? By default it is disabled...

As long as the firewall is on, you will have to set up a Core_Input rule for port 80 to allow access. Also no port forwarding on the Core on port 80 either, of course or it will just forward the traffic straight through to your internal network!

jondecker76

  • Alumni
  • wants to work for LinuxMCE
  • *
  • Posts: 763
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #3 on: February 25, 2008, 08:24:51 am »
So... Thats what the Core Input is for! (I was kind of guessing this, but wasn't sure). I'm sure it will work once I get home and change it. Thanks for the tip!

MarcoZan

  • Veteran
  • ***
  • Posts: 148
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #4 on: February 25, 2008, 10:21:48 am »
Just my 0,02 ...

I would suggest to give ssh a try. If you can connect to your core from outside via ssh, you can easily setup  your ssh client to tunnel your local port 80 to the remote end.

This way you can access web admin site every time you need, without beeing concerned too much about security.

In fact you are supposed to have only port 22 open on your router/firewall, and redirect it to the internal ip address of your core.
And if you set up properly ssh server on Core (i.e no root login allowed, for instance) you can be confident enough that your box won't be subject to unauthorized access.

HTH

Marco

totallymaxed

  • LinuxMCE God
  • ****
  • Posts: 4360
  • Smart Home Consulting
    • View Profile
    • Dianemo - at home with technology
Re: Access web admin from external IP (over the internet)?
« Reply #5 on: February 25, 2008, 12:10:20 pm »
Just my 0,02 ...

I would suggest to give ssh a try. If you can connect to your core from outside via ssh, you can easily setup  your ssh client to tunnel your local port 80 to the remote end.

This way you can access web admin site every time you need, without beeing concerned too much about security.

In fact you are supposed to have only port 22 open on your router/firewall, and redirect it to the internal ip address of your core.
And if you set up properly ssh server on Core (i.e no root login allowed, for instance) you can be confident enough that your box won't be subject to unauthorized access.

HTH

Marco

All good points Marco

We setup free accounts with http://www.dyndns.com/ to make this work with URL's rather than IP's also allows you to remotely connect on a floating IP too ;-)

Andrew
Andy Herron,
Convergent Home Technologies Ltd
United Kingdom

Read My Blog; http://ellipticalcurve.com

Contact me for Smart Home consulting advice here;
@herron on Twitter, totallymaxed+consulting@gmail.com via email or PM me here.

Get a Dianemo S License: http://forum.linuxmce.org/index.php?topic=8880.0
iOS Orbiter: http://wiki.linuxmce.org/index.php/Dianemo_iOS_Orbiter
Follow us on Facebook: https://www.facebook.com/pages/Dianemo-Home-Automation/226019387454465

Sales & Info:
http://www.dianemo.co.uk

jondecker76

  • Alumni
  • wants to work for LinuxMCE
  • *
  • Posts: 763
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #6 on: February 25, 2008, 12:58:31 pm »
Thanks for the advice guys - its working now.

Security is always a concern, so I will look into more secure methods now.

thanks again

Zaerc

  • Alumni
  • LinuxMCE God
  • *
  • Posts: 2256
  • Department of Redundancy Department.
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #7 on: February 25, 2008, 03:35:19 pm »
It would be a lot more secure to just open port 22, and use SSH to tunnel port 80.
"Change is inevitable. Progress is optional."
-- Anonymous


tkmedia

  • wants to work for LinuxMCE
  • **
  • Posts: 937
    • View Profile
    • LMCECompatible
Re: Access web admin from external IP (over the internet)?
« Reply #8 on: February 25, 2008, 11:29:33 pm »
I use nxserver and nx client on other pc uses port22 and gives gui access to all my boxes on my net including winblows
My Setup http://wiki.linuxmce.org/index.php/User:Tkmedia

For LinuxMce compatible  systems and accessories
http://lmcecompatible.com/

MarcoZan

  • Veteran
  • ***
  • Posts: 148
    • View Profile
Re: Access web admin from external IP (over the internet)?
« Reply #9 on: February 26, 2008, 12:56:05 am »
As long as ssh port is open you may tunnel any desired port, including for instance port 3450 used by Orbiter so you can run a remote Orbiter and safely access your system.

This is actually the way I connect to my system when I'm away, and it's working fine.