From airteknology at gmail.com  Wed Mar 19 01:12:26 2008
From: airteknology at gmail.com (=?UTF-8?B?UGllcnBhb2xvIEd1bGzCiGE=?=)
Date: Wed, 19 Mar 2008 02:12:26 +0100
Subject: [Icecast] authorized access to streaming or mountpoint
Message-ID: <47E0687A.4080104@gmail.com>

Hi guys ,

sorry for the question , but I have read the doc , and this how to 
http://www.gnuware.com/icecast/unofficial/

but I don't find answer to my question:

it's possibile to authorize the access to the streaming/mountpoint only 
to a range of ip?There are others type of streaming authentication?


Thansk a lot


Br


Pierpaolo


From karl at xiph.org  Wed Mar 19 01:33:17 2008
From: karl at xiph.org (Karl Heyes)
Date: Wed, 19 Mar 2008 01:33:17 +0000
Subject: [Icecast] authorized access to streaming or mountpoint
In-Reply-To: <47E0687A.4080104@gmail.com>
References: <47E0687A.4080104@gmail.com>
Message-ID: <47E06D5D.1060104@xiph.org>

Pierpaolo Gull?a wrote:
> Hi guys ,
> 
> sorry for the question , but I have read the doc , and this how to 
> http://www.gnuware.com/icecast/unofficial/
> 
> but I don't find answer to my question:
> 
> it's possibile to authorize the access to the streaming/mountpoint only 
> to a range of ip?There are others type of streaming authentication?

'Access' is such a vague term. If you mean listener access then you can 
use auth url and have something external like php to allow listeners to 
authenticate based on IP ranges.

karl.




From airteknology at gmail.com  Thu Mar 20 12:39:22 2008
From: airteknology at gmail.com (=?UTF-8?B?UGllcnBhb2xvIEd1bGzCiGE=?=)
Date: Thu, 20 Mar 2008 13:39:22 +0100
Subject: [Icecast] Re: Icecast Digest, Vol 46, Issue 1
In-Reply-To: <20080319190009.9F4A7FA838@mail.xiph.org>
References: <20080319190009.9F4A7FA838@mail.xiph.org>
Message-ID: <47E25AFA.7080601@gmail.com>

Hi , thanks for you help


I try to explain to you my usage of icecast:

I'm running icecast for streaming auvio and video in vorbis and theora , 
and my users can see my streaming on my webpage , where I use cortado 
web layer.

SO my problem it's that my user can see easily the icecast address and 
can connect to it with mediaplayer like vlc , without use my website.

So I want to manage the ip that can see , access , to the stream.

In my ideas I admin to access only the web server ip , and my lan ip .

I can do it?

I read some email , sended by guys on the mailing list , that I thanks , 
where i can use iptables.

What do you think about?


Thanks for your help

Pierpaolo

icecast-request at xiph.org ha scritto:
> Send Icecast mailing list submissions to
> 	icecast at xiph.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.xiph.org/mailman/listinfo/icecast
> or, via email, send a message with subject or body 'help' to
> 	icecast-request at xiph.org
> 
> You can reach the person managing the list at
> 	icecast-owner at xiph.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Icecast digest..."
> 
> 
> Today's Topics:
> 
>    1. authorized access to streaming or mountpoint (Pierpaolo Gull?a)
>    2. Re: authorized access to streaming or mountpoint (Karl Heyes)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Wed, 19 Mar 2008 02:12:26 +0100
> From: Pierpaolo Gull?a <airteknology at gmail.com>
> Subject: [Icecast] authorized access to streaming or mountpoint
> To: icecast at xiph.org
> Message-ID: <47E0687A.4080104 at gmail.com>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> Hi guys ,
> 
> sorry for the question , but I have read the doc , and this how to 
> http://www.gnuware.com/icecast/unofficial/
> 
> but I don't find answer to my question:
> 
> it's possibile to authorize the access to the streaming/mountpoint only 
> to a range of ip?There are others type of streaming authentication?
> 
> 
> Thansk a lot
> 
> 
> Br
> 
> 
> Pierpaolo
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Wed, 19 Mar 2008 01:33:17 +0000
> From: Karl Heyes <karl at xiph.org>
> Subject: Re: [Icecast] authorized access to streaming or mountpoint
> To: Pierpaolo Gull?a <airteknology at gmail.com>
> Cc: icecast at xiph.org
> Message-ID: <47E06D5D.1060104 at xiph.org>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> Pierpaolo Gull??a wrote:
>> Hi guys ,
>>
>> sorry for the question , but I have read the doc , and this how to 
>> http://www.gnuware.com/icecast/unofficial/
>>
>> but I don't find answer to my question:
>>
>> it's possibile to authorize the access to the streaming/mountpoint only 
>> to a range of ip?There are others type of streaming authentication?
> 
> 'Access' is such a vague term. If you mean listener access then you can 
> use auth url and have something external like php to allow listeners to 
> authenticate based on IP ranges.
> 
> karl.
> 
> 
> 
> 
> ------------------------------
> 
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
> 
> 
> End of Icecast Digest, Vol 46, Issue 1
> **************************************
> 



From Geoff at QuiteLikely.com  Thu Mar 20 12:57:52 2008
From: Geoff at QuiteLikely.com (Geoff Shang)
Date: Thu, 20 Mar 2008 14:57:52 +0200 (IST)
Subject: [Icecast] Re: Icecast Digest, Vol 46, Issue 1
In-Reply-To: <47E25AFA.7080601@gmail.com>
References: <20080319190009.9F4A7FA838@mail.xiph.org>
	<47E25AFA.7080601@gmail.com>
Message-ID: <Pine.LNX.4.64.0803201454340.25076@data.home>

Pierpaolo Gull~Ha wrote:

> I'm running icecast for streaming auvio and video in vorbis and theora , and 
> my users can see my streaming on my webpage , where I use cortado web layer.
>
> SO my problem it's that my user can see easily the icecast address and can 
> connect to it with mediaplayer like vlc , without use my website.
>
> So I want to manage the ip that can see , access , to the stream.
>
> In my ideas I admin to access only the web server ip , and my lan ip .
>
> I can do it?

You can do it, but this won't help you.  Unless I'm very much mistaken, the 
Cortado player runs in the user's web browser, so their computer will need 
to be able to access the stream.

Perhaps if Cortado sends a User Agent header identifying itself then you 
could write an authenticator which only accepts connections from Cortado 
from outside your LAN and from anything from inside.

Geoff.



From leandrobhbr at gmail.com  Thu Mar 20 13:28:07 2008
From: leandrobhbr at gmail.com (Leandro Campos)
Date: Thu, 20 Mar 2008 10:28:07 -0300
Subject: [Icecast] Re: Icecast Digest, Vol 46, Issue 1
In-Reply-To: <47E25AFA.7080601@gmail.com>
References: <20080319190009.9F4A7FA838@mail.xiph.org>
	<47E25AFA.7080601@gmail.com>
Message-ID: <58435ac20803200628hdae2322k3ea3fc903ed27ff4@mail.gmail.com>

Do you Know PHP??

I dont know how is the cortado web layer

but If the users by site... have login and password to typing.... do one
form before... in php... using method post...

ie.

http://ip:8000/admin/buildm3u?username=$name&password=$paswd&mount=%2F$mount<http://localhost:8000/admin/buildm3u?username=leandro&password=leandro&mount=%2Fleandro>

$name: login
$passwd: password
$mount: mount point

method post hidden the adress of browser...

regards Leandro

2008/3/20, Pierpaolo Gull?a <airteknology at gmail.com>:
>
> Hi , thanks for you help
>
>
> I try to explain to you my usage of icecast:
>
> I'm running icecast for streaming auvio and video in vorbis and theora ,
> and my users can see my streaming on my webpage , where I use cortado
> web layer.
>
> SO my problem it's that my user can see easily the icecast address and
> can connect to it with mediaplayer like vlc , without use my website.
>
> So I want to manage the ip that can see , access , to the stream.
>
> In my ideas I admin to access only the web server ip , and my lan ip .
>
> I can do it?
>
> I read some email , sended by guys on the mailing list , that I thanks ,
> where i can use iptables.
>
> What do you think about?
>
>
> Thanks for your help
>
> Pierpaolo
>
> icecast-request at xiph.org ha scritto:
> > Send Icecast mailing list submissions to
> >       icecast at xiph.org
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >       http://lists.xiph.org/mailman/listinfo/icecast
> > or, via email, send a message with subject or body 'help' to
> >       icecast-request at xiph.org
> >
> > You can reach the person managing the list at
> >       icecast-owner at xiph.org
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Icecast digest..."
> >
> >
> > Today's Topics:
> >
> >    1. authorized access to streaming or mountpoint (Pierpaolo Gull?a)
> >    2. Re: authorized access to streaming or mountpoint (Karl Heyes)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Wed, 19 Mar 2008 02:12:26 +0100
> > From: Pierpaolo Gull?a <airteknology at gmail.com>
> > Subject: [Icecast] authorized access to streaming or mountpoint
> > To: icecast at xiph.org
> > Message-ID: <47E0687A.4080104 at gmail.com>
> > Content-Type: text/plain; charset=UTF-8; format=flowed
> >
> > Hi guys ,
> >
> > sorry for the question , but I have read the doc , and this how to
> > http://www.gnuware.com/icecast/unofficial/
> >
> > but I don't find answer to my question:
> >
> > it's possibile to authorize the access to the streaming/mountpoint only
> > to a range of ip?There are others type of streaming authentication?
> >
> >
> > Thansk a lot
> >
> >
> > Br
> >
> >
> > Pierpaolo
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Wed, 19 Mar 2008 01:33:17 +0000
> > From: Karl Heyes <karl at xiph.org>
> > Subject: Re: [Icecast] authorized access to streaming or mountpoint
> > To: Pierpaolo Gull?a <airteknology at gmail.com>
> > Cc: icecast at xiph.org
> > Message-ID: <47E06D5D.1060104 at xiph.org>
> > Content-Type: text/plain; charset=UTF-8; format=flowed
> >
> > Pierpaolo Gull??a wrote:
> >> Hi guys ,
> >>
> >> sorry for the question , but I have read the doc , and this how to
> >> http://www.gnuware.com/icecast/unofficial/
> >>
> >> but I don't find answer to my question:
> >>
> >> it's possibile to authorize the access to the streaming/mountpoint only
> >> to a range of ip?There are others type of streaming authentication?
> >
> > 'Access' is such a vague term. If you mean listener access then you can
> > use auth url and have something external like php to allow listeners to
> > authenticate based on IP ranges.
> >
> > karl.
> >
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Icecast mailing list
> > Icecast at xiph.org
> > http://lists.xiph.org/mailman/listinfo/icecast
> >
> >
> > End of Icecast Digest, Vol 46, Issue 1
> > **************************************
> >
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>



-- 
ALPHANET INFORM?TICA LTDA
www.alphanetbh.com.br

Belo Horizonte MG
Leandro Campos
(31)30726251
(31)87883925
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20080320/6c029107/attachment.htm>

From telmnstr at 757.org  Fri Mar 21 18:15:51 2008
From: telmnstr at 757.org (telmnstr at 757.org)
Date: Fri, 21 Mar 2008 14:15:51 -0400 (EDT)
Subject: [Icecast] Alternative playlist based on referrer URL?
Message-ID: <Pine.NEB.4.62.0803211412390.25204@users.757.org>

Hello everyone,

   We run a site that streams local police/fire/rescue onto the internet.

   We run a large number of feeds.

   We find that other people on the internet directly link to the feeds, 
and take credit. Some actually collect donations, even though we provide 
the service.

   I would be interested in a setup so there is an "authorized list of 
referrers" .. that is, sites we allow to directly link to us. If the 
client referrer comes from some place else, then an alternative playlist 
is used with a static file that explains that we do not allow outside 
links to the feeds, especially those that take credit for our work. So 
please use the proper website.

   Any suggestions?

 			- Ethan