+- MinimServer Forum (https://forum.minimserver.com)
+-- Forum: MinimServer (/forumdisplay.php?fid=1)
+--- Forum: Support (/forumdisplay.php?fid=4)
+--- Thread: Server security (/showthread.php?tid=636)
Pages: 1 2
Server security - castoffs - 24-05-2013 11:42
I use Minim on a Windows 8 pc, playing music on a network player via a wireless/ethernet router. Please can anyone tell me how I can secure Minim server from use by others with access to the same router?
RE: Server security - simoncn - 24-05-2013 13:54
(24-05-2013 11:42)castoffs Wrote: I use Minim on a Windows 8 pc, playing music on a network player via a wireless/ethernet router. Please can anyone tell me how I can secure Minim server from use by others with access to the same router?
You would need to isolate the player and server devices from other devices attached to the router. You could do this by putting the player and server devices on a separate subnet or in a separate VLAN. If you are using a separate UPnP control point (not running on the server device or player device), the control point device would also need to have access to this subnet or VLAN. Which player and control point are you using?
RE: Server security - castoffs - 24-05-2013 17:57
I'm using a Linn player with Bubbleupnp. I'll look into the subnet and vlan. Thanks
RE: Server security - markspend01 - 28-05-2013 17:34
Hey Guys well i think that you need to set up a firewall program.So only ports that you want to be start are runing.There are tools to see which ports on your server are start.If you have http server, you probably didn't want ftp to be start.Thanks!!
RE: Server security - castoffs - 28-05-2013 18:11
(28-05-2013 17:34)markspend01 Wrote: Hey Guys well i think that you need to set up a firewall program.So only ports that you want to be start are runing.There are tools to see which ports on your server are start.If you have http server, you probably didn't want ftp to be start.Thanks!!
As soon as the ports are open they will be open to anyone.
RE: Server security - castoffs - 21-06-2013 10:39
(28-05-2013 18:11)castoffs Wrote:(28-05-2013 17:34)markspend01 Wrote: Hey Guys well i think that you need to set up a firewall program.So only ports that you want to be start are runing.There are tools to see which ports on your server are start.If you have http server, you probably didn't want ftp to be start.Thanks!!
As soon as the ports are open they will be open to anyone.
I don't see how any of these suggestions will work. Opening ports in the firewall will open them to anyone on the system. Th is still an unsecured system.
Why not change Minim to allow a userid/password to be set up to gain access?
RE: Server security - simoncn - 21-06-2013 14:23
(21-06-2013 10:39)castoffs Wrote: I don't see how any of these suggestions will work. Opening ports in the firewall will open them to anyone on the system. Th is still an unsecured system.
Why not change Minim to allow a userid/password to be set up to gain access?
Security authentication and authorisation is not supported by the UPnP protocol. If MinimServer provided this capability, control points and media renderers wouldn't be able to send the necessary credentials.
RE: Server security - castoffs - 21-06-2013 14:52
Maybe I should go back to Slimserver.
RE: Server security - simoncn - 21-06-2013 15:13
(21-06-2013 14:52)castoffs Wrote: Maybe I should go back to Slimserver.
Did you investigate my suggestions of using a subnet or VLAN? Is there a problem with these approaches?
RE: Server security - simoncn - 21-06-2013 16:46
(21-06-2013 15:13)simoncn Wrote: Did you investigate my suggestions of using a subnet or VLAN? Is there a problem with these approaches?
It might be helpful for me to explain this approach in a bit more detail. It divides a single physical network into multiple logical sections, where the machines in one section can't access those in another section. It's possible to set up routing between the sections to provide limited access between the sections for specific purposes.
With this approach, you'd need to put your audio server, audio renderer and control point in one section, and put the other machines that you want to exclude from having access to your audio server in the other section.