mvordeme;428454 Wrote: 
> Is this making any sense at all?
Yes, it is.  Which flavor of windows are you running?

IMHO, the simplest approach on a windows server is to run SqueezeCenter
as a service under an administrative account.  If you make the
appropriate settings in SqueezeCenter->Settings->Advanced->Security,
there should be few, if any security concerns with this.

In those security settings, I usually set the "Allowed IP Addresses" to
"127.0.0.1,192.168.1.*".  Make sure the second address range there
matches your subnet...i.e. if your client machines on your network get
addresses like "192.168.0.xxx" from your router's dhcp server, then make
the "Allowed IP Addresses" equal to "127.0.0.1,192.168.0.*".

Then, make sure you have the CSRF protection level set to Medium or
higher and set "Block Incoming Connections" to "Block."

That ought to protect the service from any sort of casual attack.

Lots of potential problems just go away if SqueezeCenter can have
Administrative credentials.  Or, experiment with creating a new user
group that has just enough permissions to get the job done without being
a full blown administrator...and make make the squeezecenter user a
member of that group and run SqueezeCenter under that account.


-- 
gharris999
------------------------------------------------------------------------
gharris999's Profile: http://forums.slimdevices.com/member.php?userid=115
View this thread: http://forums.slimdevices.com/showthread.php?t=48521

_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/plugins

Reply via email to