Hi All,
A few questions regarding a remote webpage interface...
I know the HDA can be accessed remotely via VPN...I'd also love to set it up as a webserver (I chose the webserver feature on the Fedora 9 install) so that friends can access it over the internet via my domain name. I'd like to throw up a webpage of my own design to greet visitors, with my own links to shares, etc. Is this possible?
Assuming I created a domain name of mystuff.com during the Amahi install, what would friends be typing into their address bar to access the site? Can anyone tell me where I'd put my "index" & other files for the page?
Also guess I'd need to allow port forwarding on a router port?
Are people doing this and if so should they be doing it? It sounds cool but also invites some special security concerns I'm sure. Lots of questions I know...appreciate the patience.
Thanks to the Amahi Team!!
Amahi Access for Friends
Re: Amahi Access for Friends
Huge security concerns, I would not recommend opening up HDA to the net unless you are a expert in linux and setting up security within it.
Re: Amahi Access for Friends
hi bman289,
there is demand for this feature, so we will probably put something in soon to make it easy to do this in a safe way.
as rampage pointed out, it's something that we need to do with care, as there are potential security implications for doing so.
DISCLAIMER: following the instructions below may or may not be fully secure. please don't blame me if your system blows up in pieces!
you will need to point mystuff.com to your ip address, or make it a CNAME to YOURNICK.yourhda.com
(or your own dyndns, if you have any).
What page gets shown by default is controlled by the order of the files in /etc/httpd/conf.d.
Link or copy (don't move!) the conf file of the app you want to make the default to a file called
00-default.conf. Say you have 1003-gallery2.conf running gallery and you want to show it by default.
You do this:
i would recommend making it password protected and perhaps running it over https.
it is certainly possible. we know of several people in the community having done so.I know the HDA can be accessed remotely via VPN...I'd also love to set it up as a webserver (I chose the webserver feature on the Fedora 9 install) so that friends can access it over the internet via my domain name. I'd like to throw up a webpage of my own design to greet visitors, with my own links to shares, etc. Is this possible?
there is demand for this feature, so we will probably put something in soon to make it easy to do this in a safe way.
as rampage pointed out, it's something that we need to do with care, as there are potential security implications for doing so.
DISCLAIMER: following the instructions below may or may not be fully secure. please don't blame me if your system blows up in pieces!
yes, you will need to forward port 80 and/or port 443 (https).Assuming I created a domain name of mystuff.com during the Amahi install, what would friends be typing into their address bar to access the site? Can anyone tell me where I'd put my "index" & other files for the page?
Also guess I'd need to allow port forwarding on a router port?
you will need to point mystuff.com to your ip address, or make it a CNAME to YOURNICK.yourhda.com
(or your own dyndns, if you have any).
This is technical, so be cautious on what you do. I assume you can run commands inAre people doing this and if so should they be doing it? It sounds cool but also invites some special security concerns I'm sure. Lots of questions I know...appreciate the patience.
Thanks to the Amahi Team!!
What page gets shown by default is controlled by the order of the files in /etc/httpd/conf.d.
Link or copy (don't move!) the conf file of the app you want to make the default to a file called
00-default.conf. Say you have 1003-gallery2.conf running gallery and you want to show it by default.
You do this:
Code: Select all
ln 1003-gallery2.conf 00-default.conf
service httpd restart
My HDA: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz on MSI board, 8GB RAM, 1TBx2+3TBx1
Re: Amahi Access for Friends
I second (well, third) the motion regarding the security concerns.
I wouldn't recommend having Amahi face the internet at large. However, a webserver luckily doesn't need lots of resources so you may have another option.
I'm thinking of running a very minimal install with webserver within a Virtual Machine (VMWare for instance). If you set up that image with its own IP address and let your router pass through traffic to that system your Amahi install isn't affected if the VM image is compromised. This will be some work to set up but it ensures a clear separation from your (valuable) data on Amahi.
I wouldn't recommend having Amahi face the internet at large. However, a webserver luckily doesn't need lots of resources so you may have another option.
I'm thinking of running a very minimal install with webserver within a Virtual Machine (VMWare for instance). If you set up that image with its own IP address and let your router pass through traffic to that system your Amahi install isn't affected if the VM image is compromised. This will be some work to set up but it ensures a clear separation from your (valuable) data on Amahi.
echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D2173656C7572206968616D41snlbxq' | dc
Galileo - HP Proliant ML110 G6 quad core Xeon 2.4GHz, 4GB RAM, 2x750GB RAID1 + 2x1TB RAID1 HDD
Galileo - HP Proliant ML110 G6 quad core Xeon 2.4GHz, 4GB RAM, 2x750GB RAID1 + 2x1TB RAID1 HDD
Re: Amahi Access for Friends
i wonder if we could do something with http://www.freevps.com/ or with xen or even a chrooted httpd.
something lighter than a full vm.
something lighter than a full vm.
My HDA: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz on MSI board, 8GB RAM, 1TBx2+3TBx1
Re: Amahi Access for Friends
Thanks for the opinions guys!
I can see why the demand would be high for it - that's the one thing WHS has going for it; being able to give a friend your domain/password to access your MP3 collection, etc.
IMO getting that set up safely for Amahi would make it the top choice home server for any newbie Linux or MS user...You'd have the stability of Linux and Amahi's price is much better than MS
I can see why the demand would be high for it - that's the one thing WHS has going for it; being able to give a friend your domain/password to access your MP3 collection, etc.
IMO getting that set up safely for Amahi would make it the top choice home server for any newbie Linux or MS user...You'd have the stability of Linux and Amahi's price is much better than MS
Re: Amahi Access for Friends
Thanks for the opinions guys!
I can see why the demand would be high for it - that's the one thing WHS has going for it; being able to give a friend your domain/password to access your MP3 collection, etc.
IMO getting that set up safely for Amahi would make it the top choice home server for any newbie Linux or MS user...You'd have the stability of Linux and Amahi's price is much better than MS
ill give this a bump!
Id like to be able to download files remotely just by using internet explorer, is this possible? This is so i can access my music from work where our computers are locked down.
Re: Amahi Access for Friends
i'm aware of people voicing these concerns but exactly what are they?
i'm also aware of the ideal world eg just use a sole box as a webserver etc
but.....
if the directory isn't writable, what damage can be done? i've had webservers going for years and never had an issue and yes before you ask, they have been targetted and we did get hacked on one. but that was via the xmb software and a flaw in that, not apache itself. the hackers were limited to that app only.
so, can anybody shed any light on this?
i'm also aware of the ideal world eg just use a sole box as a webserver etc
but.....
if the directory isn't writable, what damage can be done? i've had webservers going for years and never had an issue and yes before you ask, they have been targetted and we did get hacked on one. but that was via the xmb software and a flaw in that, not apache itself. the hackers were limited to that app only.
so, can anybody shed any light on this?
Re: Amahi Access for Friends
lou1z, I'm with you on this. Why is it OK to be able to access the HDA control panel in clear text over the internet, which allows you to change settings, but not your files that are on the server?i'm aware of people voicing these concerns but exactly what are they?
i'm also aware of the ideal world eg just use a sole box as a webserver etc?
I'd be prepared to get involved in developing stuff for Amahi, so if no one is currently working on anything like this, and people tell us the following...:
a) for what reasons they think this is a security hole?
b) what kind of features do people want access to?
Norco 4220 Case
Gigabyte GA-G33-DS3R Motherboard w/ 8GB RAM
LSI SAS2116PCIe 6GB/s SAS (replaced 3Ware 9690SA-4I & Chenbro CK1360)
1 x Hitachi 160Gb2.5" System Drive (original 1 x OCZ 60GB Vertex 2 SATAII 2.5" SSD died)
8 x 4TB Hitachi Deskstars
6 x 3TB Hitachi Deskstars
6 x 2TB Hitachi Deskstars (1 dead!)
Gigabyte GA-G33-DS3R Motherboard w/ 8GB RAM
LSI SAS2116PCIe 6GB/s SAS (replaced 3Ware 9690SA-4I & Chenbro CK1360)
1 x Hitachi 160Gb2.5" System Drive (original 1 x OCZ 60GB Vertex 2 SATAII 2.5" SSD died)
8 x 4TB Hitachi Deskstars
6 x 3TB Hitachi Deskstars
6 x 2TB Hitachi Deskstars (1 dead!)
Re: Amahi Access for Friends
i would like to be able to download files and maybe upload them and give guest access read only to a particular share. I've been trying to research this but not knowing anything about Linux makes this a daunting and time consuming process. Is this easy to do with WHS? I don't want to do this if it is a big security risk though.
Who is online
Users browsing this forum: No registered users and 44 guests