Send Motion-user mailing list submissions to motion-user@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/motion-user or, via email, send a message with subject or body 'help' to motion-user-requ...@lists.sourceforge.net You can reach the person managing the list at motion-user-ow...@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Motion-user digest..." Today's Topics: 1. Get client ip (Spiros Georgakis) 2. Re: Get client ip (tosiara) 3. Re: Get client ip (Colin Law) 4. Re: Get client ip (tosiara) 5. Re: Get client ip (Colin Law) 6. Re: Get client ip (Adam Goryachev) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Mar 2017 22:15:23 -0800 From: Spiros Georgakis <spyri...@gmail.com> Subject: [Motion-user] Get client ip To: motion-user@lists.sourceforge.net Message-ID: <cam3xxcua3-cfms9y1mc3_jffuhxdacq4rpdbz-akg1i7flq...@mail.gmail.com> Content-Type: text/plain; charset="utf-8" Hello, Is there any way that the motion will log the client-ip that is trying to get access onto 8081 port? Since motion.conf gives the option for stream authentication, I was thinking to block any ip that is doing a brute force attack onto username/password credentials. Maybe log the client-ip in a failed log attempt. Thank you! SG. -------------- next part -------------- An HTML attachment was scrubbed... ------------------------------ Message: 2 Date: Wed, 8 Mar 2017 09:48:21 +0200 From: tosiara <tosi...@gmail.com> Subject: Re: [Motion-user] Get client ip To: Motion discussion list <motion-user@lists.sourceforge.net> Message-ID: <cachtdwtovkcejo1qf1dg6csnouoxsohnh3mxg92guzalynt...@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 I think logging clients IP address would be quite easy enhancement. Please file an issue under github project On Wed, Mar 8, 2017 at 8:15 AM, Spiros Georgakis <spyri...@gmail.com> wrote: > Hello, > > Is there any way that the motion will log the client-ip that is trying to > get access onto 8081 port? > > Since motion.conf gives the option for stream authentication, I was thinking > to block any ip that is doing a brute force attack onto username/password > credentials. > > Maybe log the client-ip in a failed log attempt. > > > Thank you! > SG. > > ------------------------------------------------------------------------------ > Announcing the Oxford Dictionaries API! The API offers world-renowned > dictionary content that is easy and intuitive to access. Sign up for an > account today to start using our lexical data to power your apps and > projects. Get started today and enter our developer competition. > http://sdm.link/oxford > _______________________________________________ > Motion-user mailing list > Motion-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/motion-user > https://motion-project.github.io/ > > Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user ------------------------------ Message: 3 Date: Wed, 8 Mar 2017 08:21:49 +0000 From: Colin Law <clan...@gmail.com> Subject: Re: [Motion-user] Get client ip To: Motion discussion list <motion-user@lists.sourceforge.net> Message-ID: <CAL=0glv_2wwl0du8kb46+6oqchgvyqjwet7b20cihqnnyry...@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote: > Hello, > > Is there any way that the motion will log the client-ip that is trying to > get access onto 8081 port? > > Since motion.conf gives the option for stream authentication, I was thinking > to block any ip that is doing a brute force attack onto username/password > credentials. > > Maybe log the client-ip in a failed log attempt. Possibly using fail2ban might be a good way of doing this. Has anyone worked out the config to use for fail2ban in conjunction with motion? Colin ------------------------------ Message: 4 Date: Wed, 8 Mar 2017 10:28:55 +0200 From: tosiara <tosi...@gmail.com> Subject: Re: [Motion-user] Get client ip To: Motion discussion list <motion-user@lists.sourceforge.net> Message-ID: <CACHTdwTTUYivjjEQytN=zNHyZBrORBZJookK3M=zxxsxnxw...@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 Well, if we are talking about adding 3rdpaty http software as frontend, then you can set up apache or nginx with reverse proxy and take control of ip logging and access control and even use digest auth instead of basic On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote: > On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote: >> Hello, >> >> Is there any way that the motion will log the client-ip that is trying to >> get access onto 8081 port? >> >> Since motion.conf gives the option for stream authentication, I was thinking >> to block any ip that is doing a brute force attack onto username/password >> credentials. >> >> Maybe log the client-ip in a failed log attempt. > > Possibly using fail2ban might be a good way of doing this. Has anyone > worked out the config to use for fail2ban in conjunction with motion? > > Colin > > ------------------------------------------------------------------------------ > Announcing the Oxford Dictionaries API! The API offers world-renowned > dictionary content that is easy and intuitive to access. Sign up for an > account today to start using our lexical data to power your apps and > projects. Get started today and enter our developer competition. > http://sdm.link/oxford > _______________________________________________ > Motion-user mailing list > Motion-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/motion-user > https://motion-project.github.io/ > > Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user ------------------------------ Message: 5 Date: Wed, 8 Mar 2017 08:35:53 +0000 From: Colin Law <clan...@gmail.com> Subject: Re: [Motion-user] Get client ip To: Motion discussion list <motion-user@lists.sourceforge.net> Message-ID: <CAL=0gLv-kc1_uG5CX=xb0ck9ylsc4tms5hzsjzd+smavqe1...@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 I would have thought it is not necessary to install something like apache to use fail2ban. Stopping brute force attacks is exactly what it is intended to do, so why not use a tool designed to do exactly that? We just need someone with the right knowledge to guide us as to how to do it :) Colin On 8 March 2017 at 08:28, tosiara <tosi...@gmail.com> wrote: > Well, if we are talking about adding 3rdpaty http software as > frontend, then you can set up apache or nginx with reverse proxy and > take control of ip logging and access control and even use digest auth > instead of basic > > On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote: >> On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote: >>> Hello, >>> >>> Is there any way that the motion will log the client-ip that is trying to >>> get access onto 8081 port? >>> >>> Since motion.conf gives the option for stream authentication, I was thinking >>> to block any ip that is doing a brute force attack onto username/password >>> credentials. >>> >>> Maybe log the client-ip in a failed log attempt. >> >> Possibly using fail2ban might be a good way of doing this. Has anyone >> worked out the config to use for fail2ban in conjunction with motion? >> >> Colin >> >> ------------------------------------------------------------------------------ >> Announcing the Oxford Dictionaries API! The API offers world-renowned >> dictionary content that is easy and intuitive to access. Sign up for an >> account today to start using our lexical data to power your apps and >> projects. Get started today and enter our developer competition. >> http://sdm.link/oxford >> _______________________________________________ >> Motion-user mailing list >> Motion-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/motion-user >> https://motion-project.github.io/ >> >> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user > > ------------------------------------------------------------------------------ > Announcing the Oxford Dictionaries API! The API offers world-renowned > dictionary content that is easy and intuitive to access. Sign up for an > account today to start using our lexical data to power your apps and > projects. Get started today and enter our developer competition. > http://sdm.link/oxford > _______________________________________________ > Motion-user mailing list > Motion-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/motion-user > https://motion-project.github.io/ > > Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user ------------------------------ Message: 6 Date: Wed, 8 Mar 2017 19:42:42 +1100 From: Adam Goryachev <mailingli...@websitemanagers.com.au> Subject: Re: [Motion-user] Get client ip To: motion-user@lists.sourceforge.net Message-ID: <586b5722-c90b-5e18-5249-cabc07196...@websitemanagers.com.au> Content-Type: text/plain; charset=windows-1252; format=flowed On 8/3/17 19:35, Colin Law wrote: > I would have thought it is not necessary to install something like > apache to use fail2ban. Stopping brute force attacks is exactly what > it is intended to do, so why not use a tool designed to do exactly > that? > > We just need someone with the right knowledge to guide us as to how to do it > :) First you need to have a log that records the client IP and some words to say the login failed. Often this might include the username that was used to attempt to login. Only after that is done, then fail2ban will be able to monitor the log file, and take action as configured... > Colin > > On 8 March 2017 at 08:28, tosiara <tosi...@gmail.com> wrote: >> Well, if we are talking about adding 3rdpaty http software as >> frontend, then you can set up apache or nginx with reverse proxy and >> take control of ip logging and access control and even use digest auth >> instead of basic >> >> On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote: >>> On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote: >>>> Hello, >>>> >>>> Is there any way that the motion will log the client-ip that is trying to >>>> get access onto 8081 port? >>>> >>>> Since motion.conf gives the option for stream authentication, I was >>>> thinking >>>> to block any ip that is doing a brute force attack onto username/password >>>> credentials. >>>> >>>> Maybe log the client-ip in a failed log attempt. >>> Possibly using fail2ban might be a good way of doing this. Has anyone >>> worked out the config to use for fail2ban in conjunction with motion? >>> >>> Colin >>> >>> ------------------------------------------------------------------------------ >>> Announcing the Oxford Dictionaries API! The API offers world-renowned >>> dictionary content that is easy and intuitive to access. Sign up for an >>> account today to start using our lexical data to power your apps and >>> projects. Get started today and enter our developer competition. >>> http://sdm.link/oxford >>> _______________________________________________ >>> Motion-user mailing list >>> Motion-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/motion-user >>> https://motion-project.github.io/ >>> >>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user >> ------------------------------------------------------------------------------ >> Announcing the Oxford Dictionaries API! The API offers world-renowned >> dictionary content that is easy and intuitive to access. Sign up for an >> account today to start using our lexical data to power your apps and >> projects. Get started today and enter our developer competition. >> http://sdm.link/oxford >> _______________________________________________ >> Motion-user mailing list >> Motion-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/motion-user >> https://motion-project.github.io/ >> >> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user > ------------------------------------------------------------------------------ > Announcing the Oxford Dictionaries API! The API offers world-renowned > dictionary content that is easy and intuitive to access. Sign up for an > account today to start using our lexical data to power your apps and > projects. Get started today and enter our developer competition. > http://sdm.link/oxford > _______________________________________________ > Motion-user mailing list > Motion-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/motion-user > https://motion-project.github.io/ > > Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user ------------------------------ ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford ------------------------------ _______________________________________________ Motion-user mailing list Motion-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/motion-user End of Motion-user Digest, Vol 130, Issue 4 *******************************************