Yeah, if you're using the default ROBUST configuration then 8003 is the one you want to protect. 8002 has to be left
open for the client to reach the login service, grid info and voice (if present).
On 07/04/11 17:05, Tim Gildersleeve wrote:
Thanks for the reply Justin.
So to protect it with a Firewall, would that be putting port 8003 behind
the firewall? Is that the port used between region and grid servers and
8002 the port used by the client to connect to regions/grid?
Regards
Tim
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Justin
Clark-Casey
Sent: 06 April 2011 23:43
To: [email protected]
Subject: Re: [Opensim-users] Robust accepting registration requestsfrom
OpenSim.exe
On 06/04/11 12:05, Tim Gildersleeve wrote:
Hi
I have done some searching but haven't been able to find anything on
this, I am sorry if I have missed something obvious.
Back in 0.6 the grid servers required a send and receive key to
authorise the region server to register with the grid server. I can't
see any obvious facility for this now in Robust. I run a small
personal grid and recently moved it to another server with Robust and
OpenSim.ini (with about 8 regions) running on that machine. I kept
some regions that were not often used on my existing server and
changed them to connect to the Robust server on the new machine. It
all worked perfectly so that was good.. but it got me thinking. When I
set my old server to register regions on the external robust server, all
I had to do was point it to the address. I didn't have to put in any key
to sell the Robust server who I was. Apart from the security via
obscurity of people not guessing the address of my Robust server, anyone
could register any regions on this it seems.
There must be more to it than this, what am I missing?
The keys were removed some time ago. As far as I recall, the feeling
was that it didn't provide meaningful security and there were no strong
objections to their removal.
If you want to protect your robust server then you will need to do it
via firewall settings.
--
Justin Clark-Casey (justincc)
http://justincc.org/blog
http://twitter.com/justincc
_______________________________________________
Opensim-users mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/opensim-users
_______________________________________________
Opensim-users mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/opensim-users
--
Justin Clark-Casey (justincc)
http://justincc.org/blog
http://twitter.com/justincc
_______________________________________________
Opensim-users mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/opensim-users
