Linuxconf html mode access control
Introduction
_L_i_n_u_x_c_o_n_f can be operated using any web browser. This makes linux much
more appealing for remote management. You can limit access to this
facility for some networks or hosts.
11.. PPrriinncciippllee
Using a password to limit access to a machine is good but not perfect.
A stolen password is never reported missing! Limiting access to a
machine based on potentially simpler criterion such as physical
location is sometime better. Limiting access to Linuxconf to some
specific hosts or hosts on some specific networks is a way to limit
potential problems.
22.. TThhee ddiiaalloogg
A check box lets you activate logging. If activated, linuxconf will
add a line to /var/log/htmlaccess.log each time there is an http
request.
The rest of the dialog goes like this. You must specify pairs. You
specify a host or a network and optionally a netmask. Your option to
specify a host or network are
+o A host name
+o A network name
+o An IP number
+o A device name (eth0 eth1)
A default netmask is computed based on the type of the first entry (Is
it a host or network). You can override this by supplying the
optionnal netmask. It is also possible to specify a host name but to
specify also a wider netmask, allowing all hosts on the network where
this host lives.
Some examples:
machine1.foo.com
(empty netmask imply 255.255.255.255)
10.1.2.0
255.255.255.0
eth0
(empty netmask grab the current one for eth0)
The first pair allows one machine. The second and third allow complete
networks.
33.. TThhee AAdddd bbuuttttoonn
If you need more space, use the _A_d_d button. It will add 4 more lines
to the dialog each time it is depressed.
44.. TThhee ddeeffaauulltt bbeehhaavviioorr
Unless you fill this dialog, _L_i_n_u_x_c_o_n_f will only accept http
connection from the local network of the first Ethernet adaptor. The
default behavior is fairly secure.