1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
Linuxconf HTML mode access control
_L_i_n_u_x_c_o_n_f can be operated using any Web browser. This makes Linux much
more appealing for remote management. You can limit access to this
facility to certain networks or hosts.
11.. PPrriinncciippllee
Using a password to limit access to a machine is a good idea but it
isn't perfect. A stolen password is never reported missing! Limiting
access to a machine based on a potentially simpler criteria, such as
physical location, is sometimes better. Limiting access to Linuxconf
to specific hosts or hosts on specific networks is a way to limit
potential problems.
22.. TThhee ddiiaalloogg
A checkbox lets you activate logging. If activated, Linuxconf will add
a line to /var/log/htmlaccess.log for every HTTP request.
The rest of the dialog goes like this. You must specify pairs. You
specify a host or a network and optionally a netmask. Your options in
specifying a host or network are:
+o A host name
+o A network name
+o An IP number
+o A device name (eth0 eth1)
A default netmask is computed based on the type of the first entry (is
it a host or network?). You can override this by supplying the
optional netmask. Also, it is possible to specify a host name with a
wider netmask, allowing access by all hosts on this host's network.
Some examples:
machine1.foo.com
(empty netmask implies 255.255.255.255)
10.1.2.0
255.255.255.0
eth0
(empty netmask grabs the current one for eth0)
The first pair allows access from one machine. The second and third
allow access to complete networks.
33.. TThhee AAdddd bbuuttttoonn
If you need more space, use the _A_d_d button. It will add four more
lines to the dialog each time it is depressed.
44.. TThhee ddeeffaauulltt bbeehhaavviioorr
Unless you fill in this dialog, _L_i_n_u_x_c_o_n_f will only accept HTTP
connections from the local network of the first Ethernet adapter. The
default behavior is fairly secure.
55.. NNoottee ttoo ddeemmoo uusseerrss
When Linuxconf is run in demo mode, it allows access to this dialog
but does not record any changes. Nevertheless, HTML access is still
enforced even in demo mode.
|
