[icecast] Restricting access to specific IPs

[Kerry Cox]

It just occurred to me that setting up a simple IPtables script might be
just as easy. Aside from the default firewall that comes with the latest
Red Hat Linux, you could try the GUI tool fwbuilder (fwbuilder.org).
Just installed it on a test RH 8.0 system with great success. Simply
create the hosts and services and networks you want, then click and drag
to create the rule sets. Your config is saved in XML format. Then click
compile and you have viable script. You can set up the range of IP
addresses you want to access the box while keeping port 8000 open only
for them.
It's a pretty nifty little tool for users not wanting to dirty their
hands with raw IPtables scripts.
Hope that helps.
KJ

<p>On Tue, 2003-02-25 at 15:51, Steve Meuse wrote:
> Jesper Johnson expunged (jesper.johnson at welho.com):
> 
> > I tried searching the mailing list and did some googling on the topic also, 
> > but didn't find anything very useful. I'm looking for a way to restrict 
> > access to my icecast2 server (which runs on a Slackware 8.1 system)
> > by using a list of IPs that should be allowed to connect as clients / sources.
> > .. now how do I do this? ;-) I remember that it was possible in the older
> > Icecast version to have rules in the configuration file, but since the
> > docs on Icecast2 aren't complete, I have no clue on how to do this.
> 
> I always recommend using a filtering router, but that tends not to be an
> option for most people. Kernel packet filtering is probably what I would
> recommend. I like to keep these types of functions out of user land, but
> ymmv.
> 
> -Steve
> 
> 
> --
> Progress (n.):  The process through which the Internet has evolved from smart
> people in front of dumb terminals to dumb people in front of smart terminals.
> --
> --- >8 ----
> List archives:  http://www.xiph.org/archives/
> icecast project homepage: http://www.icecast.org/
> To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
> containing only the word 'unsubscribe' in the body.  No subject is needed.
> Unsubscribe messages sent to the list will be ignored/filtered.

-- 

/-----------------------------\__/--------------------------------\
|       Kerry J. Cox           __         kerry.cox at ksl.com       |
|   KSL System Administrator  |  |         p: 801.575.7771        |
|    http://www.ksl.com/      |__|         f: 801.575.5745        |
|         GPG Key:             __  http://quasi.ksl.com/kerry.asc |
\-----------------------------/  \--------------------------------/

<p>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 233 bytes
Desc: This is a digitally signed message part
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20030225/43c14ef9/attachment.sig>