LinuxMCE Forums

General => Users => Topic started by: jondecker76 on February 25, 2008, 03:29:17 AM

Title: Access web admin from external IP (over the internet)?
Post by: jondecker76 on February 25, 2008, 03:29:17 AM
I would like to have access to my web admin from an external IP (over the Internet). I have my home IP address, and port 80 forwarded to my core from my DSL modem - but for some reason I can't get in.

Is there a setting that has to be enabled somewhere in the admin?

Also, I am aware of the security risks involved, its not something I plan on doing permanently.

thanks,
Jon
Title: Re: Access web admin from external IP (over the internet)?
Post by: darrenmason on February 25, 2008, 03:59:20 AM
Try a different port. Some internet providers (at least mine) don't like you running your own web server unless you pay them more I guess.

I set a port forward from another port (eg: 8080) to port 80 on my core and that worked fine.

Regards
Darren
Title: Re: Access web admin from external IP (over the internet)?
Post by: colinjones on February 25, 2008, 06:47:06 AM
Even more basic than that, maybe a stupid question, but I know you have been screwing around with your firewall, etc. Have you actually enabled port 80 on the Core's firewall? By default it is disabled...

As long as the firewall is on, you will have to set up a Core_Input rule for port 80 to allow access. Also no port forwarding on the Core on port 80 either, of course or it will just forward the traffic straight through to your internal network!
Title: Re: Access web admin from external IP (over the internet)?
Post by: jondecker76 on February 25, 2008, 08:24:51 AM
So... Thats what the Core Input is for! (I was kind of guessing this, but wasn't sure). I'm sure it will work once I get home and change it. Thanks for the tip!
Title: Re: Access web admin from external IP (over the internet)?
Post by: MarcoZan on February 25, 2008, 10:21:48 AM
Just my 0,02 ...

I would suggest to give ssh a try. If you can connect to your core from outside via ssh, you can easily setup  your ssh client to tunnel your local port 80 to the remote end.

This way you can access web admin site every time you need, without beeing concerned too much about security.

In fact you are supposed to have only port 22 open on your router/firewall, and redirect it to the internal ip address of your core.
And if you set up properly ssh server on Core (i.e no root login allowed, for instance) you can be confident enough that your box won't be subject to unauthorized access.

HTH

Marco
Title: Re: Access web admin from external IP (over the internet)?
Post by: totallymaxed on February 25, 2008, 12:10:20 PM
Quote from: MarcoZan on February 25, 2008, 10:21:48 AM
Just my 0,02 ...

I would suggest to give ssh a try. If you can connect to your core from outside via ssh, you can easily setup  your ssh client to tunnel your local port 80 to the remote end.

This way you can access web admin site every time you need, without beeing concerned too much about security.

In fact you are supposed to have only port 22 open on your router/firewall, and redirect it to the internal ip address of your core.
And if you set up properly ssh server on Core (i.e no root login allowed, for instance) you can be confident enough that your box won't be subject to unauthorized access.

HTH

Marco

All good points Marco

We setup free accounts with http://www.dyndns.com/ (http://www.dyndns.com/) to make this work with URL's rather than IP's also allows you to remotely connect on a floating IP too ;-)

Andrew
Title: Re: Access web admin from external IP (over the internet)?
Post by: jondecker76 on February 25, 2008, 12:58:31 PM
Thanks for the advice guys - its working now.

Security is always a concern, so I will look into more secure methods now.

thanks again
Title: Re: Access web admin from external IP (over the internet)?
Post by: Zaerc on February 25, 2008, 03:35:19 PM
It would be a lot more secure to just open port 22, and use SSH to tunnel port 80.
Title: Re: Access web admin from external IP (over the internet)?
Post by: tkmedia on February 25, 2008, 11:29:33 PM
I use nxserver and nx client on other pc uses port22 and gives gui access to all my boxes on my net including winblows
Title: Re: Access web admin from external IP (over the internet)?
Post by: MarcoZan on February 26, 2008, 12:56:05 AM
As long as ssh port is open you may tunnel any desired port, including for instance port 3450 used by Orbiter so you can run a remote Orbiter and safely access your system.

This is actually the way I connect to my system when I'm away, and it's working fine.