Re: [webmin-l] Usermin IP Access Control

[Jamie C. <jca...@we...>]

On Thu, 2004-05-06 at 04:12, Jason Wehmhoener wrote:
> Hello,
> 
> Is it possible to configure Webmin/Usermin such that Webmin IP Access Control is
> limited to a single IP address, while Usermin is set up to allow any IP address
> to access it?
> 
> I'd like to set things up so that Webmin's port is not accessible except via
> localhost, while any user can access Usermin from any dynamic IP address (ie:
> from a dialup connection, etc)
> 
> Will that work?

Sure, that can be done. Usermin has it's own separate module for
configuration, in which you can set up IP access control that is
independent of Webmin.

> Have there ever been any reported Usermin exploits?  I've only been able to find
> info about Webmin exploits so far.

Because they share much of the same code, any bug found in Webmin would
effect the version of Usermin available at the same time..

 - Jamie