Linuxconf html mode access control Introduction _L_i_n_u_x_c_o_n_f can be operated using any web browser. This makes linux much more appealing for remote management. You can limit access to this facility for some networks or hosts. 11.. PPrriinncciippllee Using a password to limit access to a machine is good but not perfect. A stolen password is never reported missing! Limiting access to a machine based on potentially simpler criterion such as physical location is sometime better. Limiting access to Linuxconf to some specific hosts or hosts on some specific networks is a way to limit potential problems. 22.. TThhee ddiiaalloogg A check box lets you activate logging. If activated, linuxconf will add a line to /var/log/htmlaccess.log each time there is an http request. The rest of the dialog goes like this. You must specify pairs. You specify a host or a network and optionally a netmask. Your option to specify a host or network are +o A host name +o A network name +o An IP number +o A device name (eth0 eth1) A default netmask is computed based on the type of the first entry (Is it a host or network). You can override this by supplying the optionnal netmask. It is also possible to specify a host name but to specify also a wider netmask, allowing all hosts on the network where this host lives. Some examples: machine1.foo.com (empty netmask imply 255.255.255.255) 10.1.2.0 255.255.255.0 eth0 (empty netmask grab the current one for eth0) The first pair allows one machine. The second and third allow complete networks. 33.. TThhee AAdddd bbuuttttoonn If you need more space, use the _A_d_d button. It will add 4 more lines to the dialog each time it is depressed. 44.. TThhee ddeeffaauulltt bbeehhaavviioorr Unless you fill this dialog, _L_i_n_u_x_c_o_n_f will only accept http connection from the local network of the first Ethernet adaptor. The default behavior is fairly secure.