Page 1 of 1

Secure Web Access

PostPosted: Sun Mar 13, 2016 2:15 pm
by loeffelpan
Just thought about getting Serviio Pro for my Windows NAS-Server.
But i'm not sure because of the Internet-Access.

I tested forwarding Port 23423 in my router and got that working for me.
But I was wondering that remote access to http://<ip>:23423/console is unrestricted?
Therefore anyone knowing my DNS-Name or IP can access Serviio's console to change config or start and stop the Server!
Serious? Please change console to another port or make it accessable by password like mediabrowser.

Additionally I need SSL-Support for Remote Access.

Re: Secure Web Access

PostPosted: Sun Mar 13, 2016 11:24 pm
by DenyAll
HTTPS support coming next version. You will need a grunty server to do this (particularly if also transcoding), so it will depend on the specs of your NAS.

AFAIK there are no plans to add a password or user-selectable port to the console. The console is designed to run within a secure environment (your LAN). If you want to extend the console to the internet, then you should look at an external program to provide security - eg. a reverse-proxy which can then provide password support and allow you to use a different port.

Re: Secure Web Access

PostPosted: Mon Mar 14, 2016 10:28 am
by zip
Usually you won't open the console port (23423) on your router... why would you need to do that?

Re: Secure Web Access

PostPosted: Mon Mar 14, 2016 8:31 pm
by loeffelpan
Oooooh! :cry:
Blind man posting stupid things.

I just noticed, that console is on 23423 and mediabrowser is on 23424.
Of course i didn't want to forward console Port, just mediabrowser for Internet access.

Thanks for aswering stupid questions and giving SSL support with next release.
*close*

Re: Secure Web Access

PostPosted: Wed Aug 31, 2016 8:29 am
by stephendhill
The idea that your LAN is secure is a fallacy these days. Most people have lots of devices running on their LAN that they have no control over and never will. The IoT will only make this situation worse.