Send Motion-user mailing list submissions to
        motion-user@lists.sourceforge.net

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.sourceforge.net/lists/listinfo/motion-user
or, via email, send a message with subject or body 'help' to
        motion-user-requ...@lists.sourceforge.net

You can reach the person managing the list at
        motion-user-ow...@lists.sourceforge.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Motion-user digest..."


Today's Topics:

   1. Get client ip (Spiros Georgakis)
   2. Re: Get client ip (tosiara)
   3. Re: Get client ip (Colin Law)
   4. Re: Get client ip (tosiara)
   5. Re: Get client ip (Colin Law)
   6. Re: Get client ip (Adam Goryachev)


----------------------------------------------------------------------

Message: 1
Date: Tue, 7 Mar 2017 22:15:23 -0800
From: Spiros Georgakis <spyri...@gmail.com>
Subject: [Motion-user] Get client ip
To: motion-user@lists.sourceforge.net
Message-ID:
        <cam3xxcua3-cfms9y1mc3_jffuhxdacq4rpdbz-akg1i7flq...@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hello,

Is there any way that the motion will log the client-ip that is trying to
get access onto 8081 port?

Since motion.conf gives the option for stream authentication, I was
thinking to block any ip that is doing a brute force attack onto
username/password credentials.

Maybe log the client-ip in a failed log attempt.


Thank you!
SG.
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 2
Date: Wed, 8 Mar 2017 09:48:21 +0200
From: tosiara <tosi...@gmail.com>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <motion-user@lists.sourceforge.net>
Message-ID:
        <cachtdwtovkcejo1qf1dg6csnouoxsohnh3mxg92guzalynt...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

I think logging clients IP address would be quite easy enhancement.
Please file an issue under github project

On Wed, Mar 8, 2017 at 8:15 AM, Spiros Georgakis <spyri...@gmail.com> wrote:
> Hello,
>
> Is there any way that the motion will log the client-ip that is trying to
> get access onto 8081 port?
>
> Since motion.conf gives the option for stream authentication, I was thinking
> to block any ip that is doing a brute force attack onto username/password
> credentials.
>
> Maybe log the client-ip in a failed log attempt.
>
>
> Thank you!
> SG.
>
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> Motion-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user



------------------------------

Message: 3
Date: Wed, 8 Mar 2017 08:21:49 +0000
From: Colin Law <clan...@gmail.com>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <motion-user@lists.sourceforge.net>
Message-ID:
        <CAL=0glv_2wwl0du8kb46+6oqchgvyqjwet7b20cihqnnyry...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote:
> Hello,
>
> Is there any way that the motion will log the client-ip that is trying to
> get access onto 8081 port?
>
> Since motion.conf gives the option for stream authentication, I was thinking
> to block any ip that is doing a brute force attack onto username/password
> credentials.
>
> Maybe log the client-ip in a failed log attempt.

Possibly using fail2ban might be a good way of doing this. Has anyone
worked out the config to use for fail2ban in conjunction with motion?

Colin



------------------------------

Message: 4
Date: Wed, 8 Mar 2017 10:28:55 +0200
From: tosiara <tosi...@gmail.com>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <motion-user@lists.sourceforge.net>
Message-ID:
        <CACHTdwTTUYivjjEQytN=zNHyZBrORBZJookK3M=zxxsxnxw...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

Well, if we are talking about adding 3rdpaty http software as
frontend, then you can set up apache or nginx with reverse proxy and
take control of ip logging and access control and even use digest auth
instead of basic

On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote:
> On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote:
>> Hello,
>>
>> Is there any way that the motion will log the client-ip that is trying to
>> get access onto 8081 port?
>>
>> Since motion.conf gives the option for stream authentication, I was thinking
>> to block any ip that is doing a brute force attack onto username/password
>> credentials.
>>
>> Maybe log the client-ip in a failed log attempt.
>
> Possibly using fail2ban might be a good way of doing this. Has anyone
> worked out the config to use for fail2ban in conjunction with motion?
>
> Colin
>
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> Motion-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user



------------------------------

Message: 5
Date: Wed, 8 Mar 2017 08:35:53 +0000
From: Colin Law <clan...@gmail.com>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <motion-user@lists.sourceforge.net>
Message-ID:
        <CAL=0gLv-kc1_uG5CX=xb0ck9ylsc4tms5hzsjzd+smavqe1...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

I would have thought it is not necessary to install something like
apache to use fail2ban. Stopping brute force attacks is exactly what
it is intended to do, so why not use a tool designed to do exactly
that?

We just need someone with the right knowledge to guide us as to how to do it :)

Colin

On 8 March 2017 at 08:28, tosiara <tosi...@gmail.com> wrote:
> Well, if we are talking about adding 3rdpaty http software as
> frontend, then you can set up apache or nginx with reverse proxy and
> take control of ip logging and access control and even use digest auth
> instead of basic
>
> On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote:
>> On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote:
>>> Hello,
>>>
>>> Is there any way that the motion will log the client-ip that is trying to
>>> get access onto 8081 port?
>>>
>>> Since motion.conf gives the option for stream authentication, I was thinking
>>> to block any ip that is doing a brute force attack onto username/password
>>> credentials.
>>>
>>> Maybe log the client-ip in a failed log attempt.
>>
>> Possibly using fail2ban might be a good way of doing this. Has anyone
>> worked out the config to use for fail2ban in conjunction with motion?
>>
>> Colin
>>
>> ------------------------------------------------------------------------------
>> Announcing the Oxford Dictionaries API! The API offers world-renowned
>> dictionary content that is easy and intuitive to access. Sign up for an
>> account today to start using our lexical data to power your apps and
>> projects. Get started today and enter our developer competition.
>> http://sdm.link/oxford
>> _______________________________________________
>> Motion-user mailing list
>> Motion-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/motion-user
>> https://motion-project.github.io/
>>
>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
>
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> Motion-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user



------------------------------

Message: 6
Date: Wed, 8 Mar 2017 19:42:42 +1100
From: Adam Goryachev <mailingli...@websitemanagers.com.au>
Subject: Re: [Motion-user] Get client ip
To: motion-user@lists.sourceforge.net
Message-ID:
        <586b5722-c90b-5e18-5249-cabc07196...@websitemanagers.com.au>
Content-Type: text/plain; charset=windows-1252; format=flowed



On 8/3/17 19:35, Colin Law wrote:
> I would have thought it is not necessary to install something like
> apache to use fail2ban. Stopping brute force attacks is exactly what
> it is intended to do, so why not use a tool designed to do exactly
> that?
>
> We just need someone with the right knowledge to guide us as to how to do it 
> :)
First you need to have a log that records the client IP and some words 
to say the login failed. Often this might include the username that was 
used to attempt to login.
Only after that is done, then fail2ban will be able to monitor the log 
file, and take action as configured...
> Colin
>
> On 8 March 2017 at 08:28, tosiara <tosi...@gmail.com> wrote:
>> Well, if we are talking about adding 3rdpaty http software as
>> frontend, then you can set up apache or nginx with reverse proxy and
>> take control of ip logging and access control and even use digest auth
>> instead of basic
>>
>> On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <clan...@gmail.com> wrote:
>>> On 8 March 2017 at 06:15, Spiros Georgakis <spyri...@gmail.com> wrote:
>>>> Hello,
>>>>
>>>> Is there any way that the motion will log the client-ip that is trying to
>>>> get access onto 8081 port?
>>>>
>>>> Since motion.conf gives the option for stream authentication, I was 
>>>> thinking
>>>> to block any ip that is doing a brute force attack onto username/password
>>>> credentials.
>>>>
>>>> Maybe log the client-ip in a failed log attempt.
>>> Possibly using fail2ban might be a good way of doing this. Has anyone
>>> worked out the config to use for fail2ban in conjunction with motion?
>>>
>>> Colin
>>>
>>> ------------------------------------------------------------------------------
>>> Announcing the Oxford Dictionaries API! The API offers world-renowned
>>> dictionary content that is easy and intuitive to access. Sign up for an
>>> account today to start using our lexical data to power your apps and
>>> projects. Get started today and enter our developer competition.
>>> http://sdm.link/oxford
>>> _______________________________________________
>>> Motion-user mailing list
>>> Motion-user@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/motion-user
>>> https://motion-project.github.io/
>>>
>>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
>> ------------------------------------------------------------------------------
>> Announcing the Oxford Dictionaries API! The API offers world-renowned
>> dictionary content that is easy and intuitive to access. Sign up for an
>> account today to start using our lexical data to power your apps and
>> projects. Get started today and enter our developer competition.
>> http://sdm.link/oxford
>> _______________________________________________
>> Motion-user mailing list
>> Motion-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/motion-user
>> https://motion-project.github.io/
>>
>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> Motion-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user



------------------------------

------------------------------------------------------------------------------
Announcing the Oxford Dictionaries API! The API offers world-renowned
dictionary content that is easy and intuitive to access. Sign up for an
account today to start using our lexical data to power your apps and
projects. Get started today and enter our developer competition.
http://sdm.link/oxford

------------------------------

_______________________________________________
Motion-user mailing list
Motion-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/motion-user


End of Motion-user Digest, Vol 130, Issue 4
*******************************************

Reply via email to