Running web admin through port 80...
|
2005-02-25, 04:40 PM
Hey all,
I wanna run my GB-PVR web admin through port 80. What's the most secure way to do this? Thanks! Chase
- WinXP Pro, 2 GB RAM, 200 GB HDD, Core2Duo 2.4 GHz, nVidia GeForce 8800GTS, Hauppauge Win-TV PVR 350.
2005-02-25, 04:53 PM
[b Wrote:Quote[/b] ]Hi Chase. There is no secure way. If you want, run it on another port. Thats the most secure way. Make it look like something else. Like FTP 21, SSH, 22, Telnet 23 or Windows TS, 3389. Whats wrong with the default port? Thats dead secure as it belongs to nothing. Bring it on script kiddies!!
Asus A7V880 Motherboard
AMD Sempron 2400+ 1.67GHz (Socket A) CPU Maxtor DiamondMax Plus 10 200GB SATA 8MB Cache Maxtor DiamondMax Plus 10 160GB SATA 8MB Cache Corsair 512MB DDR Value Select PC3200 Hauppauge PVR150 2 X Hauppauge Nova-T (200009) FX5200 composite out
2005-02-25, 04:59 PM
The problem is, the ___ @ work think that I'll be jeopardizing network security if they don't lock off every port other than 80. So, I simply can't access my web admin through the default port. There's no way to run a reasonably secure port 80 for GB-PVR? What about IIS and such?
- WinXP Pro, 2 GB RAM, 200 GB HDD, Core2Duo 2.4 GHz, nVidia GeForce 8800GTS, Hauppauge Win-TV PVR 350.
2005-02-25, 05:08 PM
OK gotcha. Not sure about IIS as I am a Solaris man. IIS is pants any way. Give me Apache any day.
Asus A7V880 Motherboard
AMD Sempron 2400+ 1.67GHz (Socket A) CPU Maxtor DiamondMax Plus 10 200GB SATA 8MB Cache Maxtor DiamondMax Plus 10 160GB SATA 8MB Cache Corsair 512MB DDR Value Select PC3200 Hauppauge PVR150 2 X Hauppauge Nova-T (200009) FX5200 composite out
2005-02-25, 05:28 PM
I did it though my LInksys router. I made the LAN IP for the pvr static, and then mapped a port to it (random 4-digit that I searched to make sure wasn't used). Then, I posted a page w/ a redirect on it to the IP w/ the port (eg, http://www.mysite.com/pvr = http://64.123.321.123:6174, because I couldn't remember the latter).
I ran the router and port in front of some sniffers, but it's not pingable, so it's reasonably hidden. At worst, I need update the WAN IP if it changes in a lease renew (most often it doesn't)
2005-02-25, 05:31 PM
Nevermind. That mysite thing charges. What I need is a way to access my web admin through port 80 because every other one is blocked @ work. Perhaps I misunderstood the post previous this one. Clarification?
- WinXP Pro, 2 GB RAM, 200 GB HDD, Core2Duo 2.4 GHz, nVidia GeForce 8800GTS, Hauppauge Win-TV PVR 350.
2005-02-25, 07:04 PM
Do you have a router at home? Then all you need to do is enable port forwarding. Set the router up to forward port 80 to the Web admin port of the machine you're using GBPVR on. So when you access your machine from work, the request will come into port 80 on your router, but your router will forward that request to your GBPVR machine using the proper port.
Edit: That will let you do what you want to do, but I'm not sure if it will be done securely.
GB-PVR v1.1.5, 1x Hauppauge PVR-150 (v.2.0.48.25037), 2x Hauppuage PVR-500MCE (v.2.0.48.25037), Athlon XP 2500+@3200+, 1GB DDR RAM, Diamond AMD Radeon HD2600 Pro 512MB DDR2 AGP (v7.7), NVIDIA nforce2 Ultra 400 Chipset (v5.10), Chaintech AV-710 (v500b), Windows XP Home w/SP2, Microsoft .NET 2.0, DirectX 9.0c (Aug '07), NVIDIA PureVideo decoders (v.1.02-223), SchedulesDirect, Dell 2405FPW; DVI
My DVD Collection
2005-02-25, 07:06 PM
Yes, but doesn't that open up a security hole in your computer letting it through on the router?
- WinXP Pro, 2 GB RAM, 200 GB HDD, Core2Duo 2.4 GHz, nVidia GeForce 8800GTS, Hauppauge Win-TV PVR 350.
2005-02-25, 07:09 PM
See my edited post.
If you're asking for something that uses Secure Sockets or the like, I think you're out of luck. GBPVR uses a password mechanism, I believe but from a security standpoint, I don't know if that's enough.
GB-PVR v1.1.5, 1x Hauppauge PVR-150 (v.2.0.48.25037), 2x Hauppuage PVR-500MCE (v.2.0.48.25037), Athlon XP 2500+@3200+, 1GB DDR RAM, Diamond AMD Radeon HD2600 Pro 512MB DDR2 AGP (v7.7), NVIDIA nforce2 Ultra 400 Chipset (v5.10), Chaintech AV-710 (v500b), Windows XP Home w/SP2, Microsoft .NET 2.0, DirectX 9.0c (Aug '07), NVIDIA PureVideo decoders (v.1.02-223), SchedulesDirect, Dell 2405FPW; DVI
My DVD Collection
2005-02-25, 07:10 PM
I'm not saying as an expert, but I'm not sure there is going to be a "secure" way to do 80, unless you have some security experience. Even w/ a router, if your system is answering to 80, which is a common port, then that login page is about all you'll have.
Again, someone who know this stuff better may have a better answer. |
|
|
