Re: [twsocket] Webserver with local connections only

2007-12-02 Thread Fastream Technologies
I think the easiest and safest way would be to set the listening IP to
127.0.0.1 .

Regards,

SZ


On 12/2/07, George [EMAIL PROTECTED] wrote:

 Hello,

 I created a THttpServer that is used as a middleware between my delphi app
 and a flash application.
 I want to make sure that only me and flash will communicate each other so
 I
 want to restrict connections
 from outside internet or local IPs. What's the safest way to check it? Any
 piece of code is welcomed.

 Thanks
 George

 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserver with local connections only

2007-12-02 Thread Francois PIETTE
And also probably limiting the number of concurrent connections to what 
flash needs.
And also examine the request header to make sure it comes from the flash 
application. Maybe you can craft some request from your application so that 
the server application knows it comes from your own application.

All depends on the level of security you want.

--
[EMAIL PROTECTED]
The author of the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be

- Original Message - 
From: Fastream Technologies [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Sunday, December 02, 2007 9:12 AM
Subject: Re: [twsocket] Webserver with local connections only


I think the easiest and safest way would be to set the listening IP to
 127.0.0.1 .

 Regards,

 SZ


 On 12/2/07, George [EMAIL PROTECTED] wrote:

 Hello,

 I created a THttpServer that is used as a middleware between my delphi 
 app
 and a flash application.
 I want to make sure that only me and flash will communicate each other so
 I
 want to restrict connections
 from outside internet or local IPs. What's the safest way to check it? 
 Any
 piece of code is welcomed.

 Thanks
 George

 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be

 -- 
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be 

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserver with local connections only

2007-12-02 Thread DZ-Jay

On Dec 2, 2007, at 06:59, Francois PIETTE wrote:

 And also probably limiting the number of concurrent connections to what
 flash needs.
 And also examine the request header to make sure it comes from the 
 flash
 application. Maybe you can craft some request from your application so 
 that
 the server application knows it comes from your own application.

The request header can be forged easily.  Perhaps you should check the 
incoming connection IP address (on the OnSessionAvailable event) and 
reject it if it's not one of the acceptable set.

dZ.

-- 
DZ-Jay [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


[twsocket] Webserver with local connections only

2007-12-01 Thread George
Hello,

I created a THttpServer that is used as a middleware between my delphi app
and a flash application.
I want to make sure that only me and flash will communicate each other so I
 want to restrict connections
 from outside internet or local IPs. What's the safest way to check it? Any
piece of code is welcomed.

Thanks
George

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be