Le 25/03/2014 01:10, uno a écrit : > > hello, > > i wonder if there's a way to use harbor without exposing it to the public. > I'm using it quite often, always internally via vpn connections from various > sources (phones, raspberries, laptops). now i have the case that i'd need a > publicly available live input. well, my basic question is probably: is it > safe > to open harbor to the wild? i sort of trust icecast, so i maybe could check > for the availability of an icecast stream and use input.http... not sue. > any advise appreciated! thanks, udo
Well.. I found it to be safe (no a serious audit though, but the code doesn't do much that seems to be easy to exploit), but using harbour.bind_addr & a firewall sounds quite reasonnable in that case... And also (but that goes for icecast as well), the auth is sent in clear text so... Only proper auth would be something based on a script https hosted that opens the firewall, but that's already quite complicated ;) And of course, don't run liq as root.. But I hope nobody does that ;) Cheers Gilles > > ------------------------------------------------------------------------------ > Learn Graph Databases - Download FREE O'Reilly Book > "Graph Databases" is the definitive new guide to graph databases and their > applications. Written by three acclaimed leaders in the field, > this first edition is now available. Download your free book today! > http://p.sf.net/sfu/13534_NeoTech > _______________________________________________ > Savonet-users mailing list > Savonet-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/savonet-users > ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech _______________________________________________ Savonet-users mailing list Savonet-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/savonet-users
