Re: [webmin-l] Clicking BROADCAST FOR SERVERS - 4 unfamiliar items

[Galen J. <gjo...@tr...>]

pr...@pr... wrote:

>From: Prodos
>Replying to: Galen Johnson & Roger B.A. Klorese
>
>Good evening and Happy New Year!
>
>I had written:
>  
>
>>>But I don't run any "local network".
>>>It's just me, my computer, and my lil' ol' server.
>>>      
>>>
>
>
>Roger B.A. Klorese replied:
>  
>
>>You said that your server is in a colocation center, didn't you?
>>
>>Quoting:
>>
>>    
>>
>>>My server is a "Red Hat" something or other dedicated server
>>>that I hire from EV1servers.net on a monthly basis.
>>>      
>>>
>>If it lives at EV1servers.net's data center, the LOCAL NETWORK is the
>>subnet it's on in their data center.subnet it's on in their data center.
>>    
>>
>
>
>Oh! Now I see what you mean!
>
>Thanks very much for clearing that up.  :-)
>
>
>
>
>Galen Johnson wrote:
>  
>
>>Technically these ids are on your "local network"...if you look up their
>>IP addresses you'll see that they all start with 207.44.186.xxx (except
>>for districthost.com but I suspect that your hosting provider services
>>that block as well.  You can actually lock down webmin to only accept
>>requests from specific IPs and to not respond to broadcast
>>requests...this is something you should definitely pursue.  I would
>>never leave an open webmin up on the internet at large (I don't even
>>allow the rest of my company visibility).  That's just asking for
>>trouble.  Ideally, you would have your webmin interface on a nonroutable
>>internal address.  I'm not sure but there may be some best
>>practices...if there aren't there should be; most of which is just good
>>common sense in assuming a hostile environment.
>>
>>    
>>
>
>
>Thanks for that advice.
>
>How can I set up my WEBMIN to not respond to
>broadcast requests please?
>Can this be done from within the WEBMIN control panel
>or do I need to do it via EV1servers.net ?
>
>
>
>Best Wishes,
>
>PRODOS
>
>
>  
>
You want to go into the webmin configuration module and look into the
'IP Access Control' and 'Ports and Addresses' modules.  I'd really
suggest looking around at all the modules to see what all you can do.

=G=