[arm-allstar] Use SuperMon outside of Local Network

[Doug Crompton]

I think we emphasized the possibility or even probability that using the
password system within an http process is not totally secure and
recommended it not be used beyond a local firewalled network. While the
probability of this happening is remote it could happen and we wanted to
make people aware. This gets down to trade off between having all kinds of
nice control verses security. It is hard to have both. I suspect you would
need to at least use https to get to the next level of security but
implementing that is not trivial.


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*


On Thu, Jan 18, 2018 at 5:49 AM, "Neil Mooney via arm-allstar" <
arm-allstar at hamvoip.org> wrote:

> Please remember that the username and password system to log into Supermon
> is very easily bypassed so adding a strong password won't help you prevent
> someone from logging in. The same is true for Allmon2 which supermon is
> based on.
>
>
> Regards,
>
> Neil
> ________________________________
> From: arm-allstar <arm-allstar-bounces at hamvoip.org> on behalf of "Bryan
> St Clair via arm-allstar" <arm-allstar at hamvoip.org>
> Sent: 17 January 2018 17:10:48
> To: ARM Allstar
> Cc: Bryan St Clair
> Subject: Re: [arm-allstar] Use SuperMon outside of Local Network
>
> This is done via your router.
>
> I suggest you configure a port (like 8182 or 8800 - pick something unused
> in the 8000-8999 range.) that is unusual for accessing the supermon http
> page.  Of course have a strong username and password setup for admin
> access.
>
> You will set the router to forward the desired port to your local node ip
> port 80.
>
> Config is like this: publicIP:8282 -> localIP:80
>
> Example 1.2.3.4:8282 -> 192.168.1.3:80
>
> Keep in mind, opening this access has the typical security risks. Allowing
> someone to gain access to this page could be dangerous to your node and
> network.  If desired further access restrictions could be added if
> available on your router.
>
> I have this setup for my node as well as it being linked to outside network
> nodes (for on stopping management) it works perfectly. I picked random
> ports for http access as well as a different port for allstar management.
>
> Bryan
> K6CBR
>
> On Jan 17, 2018 07:59, Maurice Dake via arm-allstar <
> arm-allstar at hamvoip.org>
> wrote:
>
> > I have SuperMon set up so I can access my server while on my local
> > network.  How do I set it up so I can access my server when using
> SuperMon
> > when not at home?
> > _______________________________________________
> >
> > arm-allstar mailing list
> > arm-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> >
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>