From: John E. <sh...@co...> - 2003-12-18 21:50:12
|
On Thu, Dec 18, 2003 at 03:08:05PM +0000, Christensen Tom wrote: > I installed IPcop last night, and realized (rather astonished) that by > default anyone on the green interface can open their web browser to the > ipcop site, and they are admin, and can change anything. My green interface > is trusted, but not that much! That should not be the case. Anyone can view the first page, but to view or change anything else you need to login as the "admin" user. 1) Did you set a password for the "admin" user during setup ? 2) Are you using a browser that remembers usernames/passwords ? 3) To really test this try to access the web interface from a machine that you have not used before. > How do I make ipcop ask for a username and password before allowing admin > access? That should happen by default, unless one of the events above has happened. If you need to reset the admin password login to the console as "root" and run "setup". -- #---------------------------------------------------------# | John Edwards Email: Joh...@uk... | | | | A. Because it breaks the logical sequence of discussion | | Q. Why is top posting bad ? | #---------------------------------------------------------# |