From mheilman at radiokansas.com  Mon Nov  6 20:03:26 2023
From: mheilman at radiokansas.com (Mike Heilman)
Date: Mon, 6 Nov 2023 20:03:26 +0000
Subject: [Icecast] Can I have the source client stream UDP to Icecast server
 without requiring the TCP 3 way handshake?
Message-ID: <SJ2PR10MB75580DC4F4E9BAE3CBF0073FC6AAA@SJ2PR10MB7558.namprd10.prod.outlook.com>

I have a simplex microwave radio ethernet bridge that can transport IP network traffic in one direction only.
I need to get secondary audio streams to a transmitter site and Icecast source client seems like a good idea but the docs show me that it wants to establish a connection before starting the UDP stream.
Can this be tweaked to just send the UDP steam to an ip address and port number. If not can anyone think of a work around to get it going the UDP steam through the link?


Mike Heilman
Station Engineer
Radio Kansas
KHCC.KHCD.KHCT
www.radiokansas.com<http://www.radiokansas.com>
620-665-4904

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231106/15e63c0a/attachment.htm>

From epirat07 at gmail.com  Mon Nov  6 22:53:37 2023
From: epirat07 at gmail.com (epirat07 at gmail.com)
Date: Mon, 06 Nov 2023 23:53:37 +0100
Subject: [Icecast] Can I have the source client stream UDP to Icecast
 server without requiring the TCP 3 way handshake?
In-Reply-To: <SJ2PR10MB75580DC4F4E9BAE3CBF0073FC6AAA@SJ2PR10MB7558.namprd10.prod.outlook.com>
References: <SJ2PR10MB75580DC4F4E9BAE3CBF0073FC6AAA@SJ2PR10MB7558.namprd10.prod.outlook.com>
Message-ID: <EC57E493-D00D-4107-80F4-F22AEB271553@gmail.com>



On 6 Nov 2023, at 21:03, Mike Heilman wrote:

> I have a simplex microwave radio ethernet bridge that can transport IP network traffic in one direction only.
> I need to get secondary audio streams to a transmitter site and Icecast source client seems like a good idea but the docs show me that it wants to establish a connection before starting the UDP stream.
> Can this be tweaked to just send the UDP steam to an ip address and port number. If not can anyone think of a work around to get it going the UDP steam through the link?

Icecast is not using UDP at all.

>
>
> Mike Heilman
> Station Engineer
> Radio Kansas
> KHCC.KHCD.KHCT
> www.radiokansas.com<http://www.radiokansas.com>
> 620-665-4904

> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From fredg at paravelsystems.com  Tue Nov  7 14:39:12 2023
From: fredg at paravelsystems.com (Fred Gleason)
Date: Tue, 7 Nov 2023 09:39:12 -0500
Subject: [Icecast] Can I have the source client stream UDP to Icecast
 server without requiring the TCP 3 way handshake?
In-Reply-To: <SJ2PR10MB75580DC4F4E9BAE3CBF0073FC6AAA@SJ2PR10MB7558.namprd10.prod.outlook.com>
References: <SJ2PR10MB75580DC4F4E9BAE3CBF0073FC6AAA@SJ2PR10MB7558.namprd10.prod.outlook.com>
Message-ID: <1A3CA696-8144-44AA-BCF1-A03A373687F2@paravelsystems.com>

On Nov 6, 2023, at 3:03?PM, Mike Heilman <mheilman at radiokansas.com> wrote:

> I have a simplex microwave radio ethernet bridge that can transport IP network traffic in one direction only.
> I need to get secondary audio streams to a transmitter site and Icecast source client seems like a good idea but the docs show me that it wants to establish a connection before starting the UDP stream.
> Can this be tweaked to just send the UDP steam to an ip address and port number. If not can anyone think of a work around to get it going the UDP steam through the link?

Your best bet may be an AES-67 based setup (such as Livewire+ or WheatNet). That includes a unicast mode that uses UDP (RTP to be precise) that should do what you need. Since it sounds like you?re in a broadcast plant, you may already have what you need at hand.

Cheers!


|---------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |             Chief Developer             |
|                           |             Paravel Systems             |
|---------------------------------------------------------------------|
|         A room without books is like a body without a soul.         |
|                                                                     |
|                                                         -- Cicero   |
|---------------------------------------------------------------------|
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231107/c3dfa7f7/attachment.htm>

From zoenagy235 at gmail.com  Sat Nov 18 23:42:01 2023
From: zoenagy235 at gmail.com (Zoe Nagy)
Date: Sat, 18 Nov 2023 23:42:01 +0000
Subject: [Icecast] [icecast2] glitches between songs
Message-ID: <CAKwvJcMMEEZtU8q6iBsCqaifQ7KYnq0T4rJwLaceOGq4i-iAaw@mail.gmail.com>

Hello,

I'm casting opus to icecast2 via ices2, but there is a glitch between
songs, as if it drops buffers, instead of buffering continuously.

So VLC/Potplayer just stops, sometimes show negative time code, very weird.
I encoded songs in CBR opus.

I also tried ezstreamer, but it had the same issue as ices2, so the only
thing in common in icecast2.

if anyone wants to try it out:
  77.102.150.128:63996/kabare.ogg

Any idea?
Is there an headless alternative to icecast2?

Cheers,
Zoe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231118/3a3a3d82/attachment.htm>

From lianergoist at vongriffen.dk  Sun Nov 19 13:19:14 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 19 Nov 2023 14:19:14 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
Message-ID: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>

Hello

I hope this question is okay:

I have set up a radio with icecast2 and ices2. Everything works. I can
access it from 

http://radio.protestbandet.dk:8000/stream?

and?

http://radio.protestbandet.dk:8000

I can listen to my radio in RadioDroid on my android phone, and I can
listen via 

https://liveonlineradio.net/horsens-garage-radio

in Firefox on my computer with Ubuntu.


But people on iPad/iPhone can not acces it!


I get a nice mediaplayer in the browser on both pc and android, where I
can start and stop the stream - but in the browser on the iPad there is
no mediaplayer.

On the site

https://liveonlineradio.net/horsens-garage-radio

it says "The station is currently offline"... But, of course, it is
not.


My wife did install "cutedio" internet radio app on her iPhone, and
found my radio station, but it could not get access (it just keept on
loading and nothing happened).


So, what is the problem?


Hope someone can help


Best, 

Thomas Jensen, Denmark




From petr.pisar at atlas.cz  Sun Nov 19 14:11:03 2023
From: petr.pisar at atlas.cz (Petr Pisar)
Date: Sun, 19 Nov 2023 15:11:03 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
In-Reply-To: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
References: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
Message-ID: <ZVoXd-jR9XYXoau2@album.bayer.uni.cx>

V?Sun, Nov 19, 2023 at 02:19:14PM +0100,?Thomas Jensen napsal(a):
> I have set up a radio with icecast2 and ices2. Everything works. I can
> access it from 
> 
> http://radio.protestbandet.dk:8000/stream?
> 
That serves the radio stream in Ogg/Vorbis format.

> I can listen to my radio in RadioDroid on my android phone, and I can
> listen via 
> 
> https://liveonlineradio.net/horsens-garage-radio
>
This one also fetches the stream from
<http://radio.protestbandet.dk:8000/stream>.

> in Firefox on my computer with Ubuntu.
> 
Firefox supports Ogg/Vorbis.

> 
> But people on iPad/iPhone can not acces it!
>
According to <https://en.wikipedia.org/wiki/Vorbis#Application_software> iOS
does not support Ogg/Vorbis. There you have to use a third-party application
which adds the support.

> My wife did install "cutedio" internet radio app on her iPhone, and
> found my radio station, but it could not get access (it just keept on
> loading and nothing happened).
> 
I guess cuteradio application does not support Ogg/Vornbis either. It even
does not support FLAC <https://github.com/Suplanus/Cuterdio/issues>.

> So, what is the problem?
>
If the problem is indeed the format, then either add a stream in a different
format supported by iOS (e.g. AAC), or find and install a player which
supports Ogg/Vorbis. A quick web search recommends VLC or OPlayer.

-- Petr
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231119/391ee676/attachment.sig>

From un at aporee.org  Sun Nov 19 14:21:23 2023
From: un at aporee.org (unosonic)
Date: Sun, 19 Nov 2023 15:21:23 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
In-Reply-To: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
References: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
Message-ID: <20231119142123.lhsvbr7djx4kiq3c@mail.aporee.net>



my knowledge may be outdated, haven't looked into it for a while, but I think it's 
because macos / ios have notoriously poor to no support for ogg...
https://caniuse.com/ogg-vorbis
bests, 



Thomas Jensen:
> Hello
> 
> I hope this question is okay:
> 
> I have set up a radio with icecast2 and ices2. Everything works. I can
> access it from 
> 
> http://radio.protestbandet.dk:8000/stream?
> 
> and?
> 
> http://radio.protestbandet.dk:8000
> 
> I can listen to my radio in RadioDroid on my android phone, and I can
> listen via 
> 
> https://liveonlineradio.net/horsens-garage-radio
> 
> in Firefox on my computer with Ubuntu.
> 
> 
> But people on iPad/iPhone can not acces it!
> 
> 
> I get a nice mediaplayer in the browser on both pc and android, where I
> can start and stop the stream - but in the browser on the iPad there is
> no mediaplayer.
> 
> On the site
> 
> https://liveonlineradio.net/horsens-garage-radio
> 
> it says "The station is currently offline"... But, of course, it is
> not.
> 
> 
> My wife did install "cutedio" internet radio app on her iPhone, and
> found my radio station, but it could not get access (it just keept on
> loading and nothing happened).
> 
> 
> So, what is the problem?
> 
> 
> Hope someone can help
> 
> 
> Best, 
> 
> Thomas Jensen, Denmark
> 
> 
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From lianergoist at vongriffen.dk  Sun Nov 19 14:49:46 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 19 Nov 2023 15:49:46 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
In-Reply-To: <ZVoXd-jR9XYXoau2@album.bayer.uni.cx>
References: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
 <ZVoXd-jR9XYXoau2@album.bayer.uni.cx>
Message-ID: <8a08da9d32d17ecbabb306bcd1c0c04baa35d541.camel@vongriffen.dk>

s?n, 19 11 2023 kl. 15:11 +0100, skrev Petr Pisar:
> V?Sun, Nov 19, 2023 at 02:19:14PM +0100,?Thomas Jensen napsal(a):

> If the problem is indeed the format, then either add a stream in a
> different format supported by iOS (e.g. AAC),?

I couldn't believe it was that. 

> or find and install a player which
> supports Ogg/Vorbis. A quick web search recommends VLC or OPlayer.
> 
 Well, I have no problems listen to my radio. The problem is all those
with iOS. Well, I convert all the files to .aac

Thanks!

-- 
Thomas Jensen, Denmark


From epirat07 at gmail.com  Sun Nov 19 15:21:38 2023
From: epirat07 at gmail.com (epirat07 at gmail.com)
Date: Sun, 19 Nov 2023 16:21:38 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
In-Reply-To: <8a08da9d32d17ecbabb306bcd1c0c04baa35d541.camel@vongriffen.dk>
References: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
 <ZVoXd-jR9XYXoau2@album.bayer.uni.cx>
 <8a08da9d32d17ecbabb306bcd1c0c04baa35d541.camel@vongriffen.dk>
Message-ID: <24EA7750-3B10-4ED4-9141-4F9313FB7A91@gmail.com>



On 19 Nov 2023, at 15:49, Thomas Jensen wrote:

> s?n, 19 11 2023 kl. 15:11 +0100, skrev Petr Pisar:
>> V?Sun, Nov 19, 2023 at 02:19:14PM +0100,?Thomas Jensen napsal(a):
>
>> If the problem is indeed the format, then either add a stream in a
>> different format supported by iOS (e.g. AAC),?
>
> I couldn't believe it was that.
>
>> or find and install a player which
>> supports Ogg/Vorbis. A quick web search recommends VLC or OPlayer.
>>
>  Well, I have no problems listen to my radio. The problem is all those
> with iOS. Well, I convert all the files to .aac
>

I doubt this will work with ices2.

> Thanks!
>
> -- 
> Thomas Jensen, Denmark
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From lianergoist at vongriffen.dk  Sun Nov 19 20:03:16 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 19 Nov 2023 21:03:16 +0100
Subject: [Icecast] icecast2/ices2 don't work for iOS?
In-Reply-To: <24EA7750-3B10-4ED4-9141-4F9313FB7A91@gmail.com>
References: <d6561934e2572067676aa898637048e9f950d687.camel@vongriffen.dk>
 <ZVoXd-jR9XYXoau2@album.bayer.uni.cx>
 <8a08da9d32d17ecbabb306bcd1c0c04baa35d541.camel@vongriffen.dk>
 <24EA7750-3B10-4ED4-9141-4F9313FB7A91@gmail.com>
Message-ID: <1cc3b3ec71b3411a654b525df583c30359a4d044.camel@vongriffen.dk>

s?n, 19 11 2023 kl. 16:21 +0100, skrev epirat07 at gmail.com:
> > On 19 Nov 2023, at 15:49, Thomas Jensen wrote:
> > > > 
> >
> > > > with iOS. Well, I convert all the files to .aac
> > > > 
> > 
> > I doubt this will work with ices2.
> > 
> 

No, that didn't work. Now I use ezstream and mp3 files, and it seems to
work allright... 


Thomas


From rack00terry at icloud.com  Mon Nov 20 10:37:52 2023
From: rack00terry at icloud.com (rack00terry at icloud.com)
Date: Mon, 20 Nov 2023 10:37:52 +0000
Subject: [Icecast] Beta docs
In-Reply-To: <a821fe97ecd742a1ae217efe45d851a83ac2e4a1.camel@de.loewenfelsen.net>
References: <19D333A3-1F6F-4125-92D6-AB7C92DD02FB@me.com>
 <961AC451-3973-4AE0-86DD-11E7D83B880B@me.com>
 <a32486529e5f9f72d2d06780cb573f2ff20ebb23.camel@de.loewenfelsen.net>
 <01225136-1532-4537-BBE6-6C1D3D3A24E5@me.com>
 <a821fe97ecd742a1ae217efe45d851a83ac2e4a1.camel@de.loewenfelsen.net>
Message-ID: <F56F0364-DA5C-4162-8320-59AC74B6B089@me.com>

Hi

Is there any documentation for the new features in 2.5 beta3? I can?t find any info...

I have it up and running, but I?m trying to squash errors such as the below. EG how do I set up ?PRNG?? What are the changes to the sources that need implementing?

No PRNG seed configured. PRNG is insecure.

Unknown tags are used in the config file. See the error.log for details.

Legacy sources are connected. See mount list for details.

Global client, and source limit is bigger than suitable for current open file limit.

Core files are disabled.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231120/e3d1f714/attachment.htm>

From yahav.shasha at gmail.com  Mon Nov 20 11:51:28 2023
From: yahav.shasha at gmail.com (Yahav Shasha)
Date: Mon, 20 Nov 2023 13:51:28 +0200
Subject: [Icecast] Beta docs
In-Reply-To: <F56F0364-DA5C-4162-8320-59AC74B6B089@me.com>
References: <19D333A3-1F6F-4125-92D6-AB7C92DD02FB@me.com>
 <961AC451-3973-4AE0-86DD-11E7D83B880B@me.com>
 <a32486529e5f9f72d2d06780cb573f2ff20ebb23.camel@de.loewenfelsen.net>
 <01225136-1532-4537-BBE6-6C1D3D3A24E5@me.com>
 <a821fe97ecd742a1ae217efe45d851a83ac2e4a1.camel@de.loewenfelsen.net>
 <F56F0364-DA5C-4162-8320-59AC74B6B089@me.com>
Message-ID: <CABuab=R30qkN3PYeYW52CbAOX_F_edkTy5DOsH3-5WTX7Rcxyg@mail.gmail.com>

Hi

There seem to be some documentation at the following link:
Icecast Server - XiphWiki <https://wiki.xiph.org/Icecast_Server>



On Mon, Nov 20, 2023 at 12:47?PM <rack00terry at icloud.com> wrote:

> Hi
>
> Is there any documentation for the new features in 2.5 beta3? I can?t find
> any info...
>
> I have it up and running, but I?m trying to squash errors such as the
> below. EG how do I set up ?PRNG?? What are the changes to the sources that
> need implementing?
>
>
>    -
>
>    No PRNG seed configured. PRNG is insecure.
>    -
>
>    Unknown tags are used in the config file. See the error.log for
>    details.
>    -
>
>    Legacy sources are connected. See mount list for details.
>    -
>
>    Global client, and source limit is bigger than suitable for current
>    open file limit.
>    -
>
>    Core files are disabled.
>
>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231120/38bc09fb/attachment.htm>

From phschafft at de.loewenfelsen.net  Mon Nov 20 12:09:48 2023
From: phschafft at de.loewenfelsen.net (Philipp Schafft)
Date: Mon, 20 Nov 2023 12:09:48 +0000
Subject: [Icecast] Beta docs
In-Reply-To: <CABuab=R30qkN3PYeYW52CbAOX_F_edkTy5DOsH3-5WTX7Rcxyg@mail.gmail.com>
References: <19D333A3-1F6F-4125-92D6-AB7C92DD02FB@me.com>
 <961AC451-3973-4AE0-86DD-11E7D83B880B@me.com>
 <a32486529e5f9f72d2d06780cb573f2ff20ebb23.camel@de.loewenfelsen.net>
 <01225136-1532-4537-BBE6-6C1D3D3A24E5@me.com>
 <a821fe97ecd742a1ae217efe45d851a83ac2e4a1.camel@de.loewenfelsen.net>
 <F56F0364-DA5C-4162-8320-59AC74B6B089@me.com>
 <CABuab=R30qkN3PYeYW52CbAOX_F_edkTy5DOsH3-5WTX7Rcxyg@mail.gmail.com>
Message-ID: <47261648aedf5f5b84e00ce8117f8bda59713acd.camel@de.loewenfelsen.net>

Good morning,

On Mon, 2023-11-20 at 13:51 +0200, Yahav Shasha wrote:
> Hi
> There seem to be some documentation?at the following link:
> Icecast Server - XiphWiki

It is a good place to look at. As well as taking a look at the FAQ:
https://icecast.org/faq/


> On Mon, Nov 20, 2023 at 12:47?PM <rack00terry at icloud.com> wrote:
> > Hi
> > Is there any documentation for the new features in 2.5 beta3? I
> > can?t find any info...
> > 
> > I have it up and running, but I?m trying to squash errors such as
> > the below. EG how do I set up ?PRNG?? What are the changes to the
> > sources that need implementing?

I just wrote a little page in the wiki ;)
All fresh, just for you:
https://wiki.xiph.org/Icecast_Server/2.5_Maintenance


> > ?* No PRNG seed configured. PRNG is insecure.
> > ?* Unknown tags are used in the config file. See the error.log for
> > details.
> > ?* Legacy sources are connected. See mount list for details.
> > ?* Global client, and source limit is bigger than suitable for
> > current open file limit.
> > ?* Core files are disabled.

Keep the level (info, warning, error) in mind when taking care of those
items.

The linked wiki entry should provide some hints I hope. :)


With best regards,


-- 
Philipp Schafft (CEO/Gesch?ftsf?hrer)
Telephone:???????????+49.3535 490 17 92
Website:?????????????https://www.loewenfelsen.net/
Follow us:???????????https://www.linkedin.com/company/loewenfelsen/
Gesch?ftsf?hrer/CEO: Philipp Schafft

L?wenfelsen UG (haftungsbeschr?nkt)?????Registration number:
Bickinger Stra?e 21?????????????????????HRB 12308 CB
04916 Herzberg (Elster)?????????????????VATIN/USt-ID:
Germany?????????????????????????????????DE305133015


From rack00terry at icloud.com  Mon Nov 20 23:09:25 2023
From: rack00terry at icloud.com (rack00terry at icloud.com)
Date: Mon, 20 Nov 2023 23:09:25 +0000
Subject: [Icecast] Beta docs
In-Reply-To: <47261648aedf5f5b84e00ce8117f8bda59713acd.camel@de.loewenfelsen.net>
References: <19D333A3-1F6F-4125-92D6-AB7C92DD02FB@me.com>
 <961AC451-3973-4AE0-86DD-11E7D83B880B@me.com>
 <a32486529e5f9f72d2d06780cb573f2ff20ebb23.camel@de.loewenfelsen.net>
 <01225136-1532-4537-BBE6-6C1D3D3A24E5@me.com>
 <a821fe97ecd742a1ae217efe45d851a83ac2e4a1.camel@de.loewenfelsen.net>
 <F56F0364-DA5C-4162-8320-59AC74B6B089@me.com>
 <CABuab=R30qkN3PYeYW52CbAOX_F_edkTy5DOsH3-5WTX7Rcxyg@mail.gmail.com>
 <47261648aedf5f5b84e00ce8117f8bda59713acd.camel@de.loewenfelsen.net>
Message-ID: <A1E5AFEC-9CF5-4ECD-A52D-D7B03DCEBA48@me.com>

Thanks Philipp, so:

> Sources using legacy features or protocols are connected. This for example includes ICY sources. The list of sources should be checked for possibility of upgrading those sources.

What is it about the sources that?s considered ?legacy?? Is it a setting on the source, or?.? I?ve had a long think (I promise) and I can?t think what would be "legacy? here (apart from possibly the music!)?

> No configuration for the PRNG is given. The generator may return weak values. libigloo defaults are used. See libigloo's documentation for details.

Gonna need some more info here - C is not in my wheelhouse, so to speak ;)


> On 20 Nov 2023, at 12:09, Philipp Schafft <phschafft at de.loewenfelsen.net> wrote:
> 
> Good morning,
> 
> On Mon, 2023-11-20 at 13:51 +0200, Yahav Shasha wrote:
>> Hi
>> There seem to be some documentation at the following link:
>> Icecast Server - XiphWiki
> 
> It is a good place to look at. As well as taking a look at the FAQ:
> https://icecast.org/faq/
> 
> 
>> On Mon, Nov 20, 2023 at 12:47?PM <rack00terry at icloud.com> wrote:
>>> Hi
>>> Is there any documentation for the new features in 2.5 beta3? I
>>> can?t find any info...
>>> 
>>> I have it up and running, but I?m trying to squash errors such as
>>> the below. EG how do I set up ?PRNG?? What are the changes to the
>>> sources that need implementing?
> 
> I just wrote a little page in the wiki ;)
> All fresh, just for you:
> https://wiki.xiph.org/Icecast_Server/2.5_Maintenance
> 
> 
>>>  * No PRNG seed configured. PRNG is insecure.
>>>  * Unknown tags are used in the config file. See the error.log for
>>> details.
>>>  * Legacy sources are connected. See mount list for details.
>>>  * Global client, and source limit is bigger than suitable for
>>> current open file limit.
>>>  * Core files are disabled.
> 
> Keep the level (info, warning, error) in mind when taking care of those
> items.
> 
> The linked wiki entry should provide some hints I hope. :)
> 
> 
> With best regards,
> 
> 
> -- 
> Philipp Schafft (CEO/Gesch?ftsf?hrer)
> Telephone:           +49.3535 490 17 92
> Website:             https://www.loewenfelsen.net/
> Follow us:           https://www.linkedin.com/company/loewenfelsen/
> Gesch?ftsf?hrer/CEO: Philipp Schafft
> 
> L?wenfelsen UG (haftungsbeschr?nkt)     Registration number:
> Bickinger Stra?e 21                     HRB 12308 CB
> 04916 Herzberg (Elster)                 VATIN/USt-ID:
> Germany                                 DE305133015
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231120/52f54f43/attachment.htm>

From lianergoist at vongriffen.dk  Wed Nov 22 11:48:19 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Wed, 22 Nov 2023 12:48:19 +0100
Subject: [Icecast] mediaplayer for icecast streams?
Message-ID: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>

Hi

Hope this is not too off-topic here.

I want to implement a simple mediaplayer on my website where people can
listen to my radio stream.

I like simple, and the HTML <audio>-tag seems to work fine, so this is
perfect for me.?

But I would like to show the title of the current song playing. Is
there some simple javascript or php I can use, to get this information?

Or maybe a simple mediaplayer I can implement on my web site?

https://protestbandet.dk


Thanks...


Thomas Jensen, Denmark



From that.jack.elliott at gmail.com  Wed Nov 22 15:13:13 2023
From: that.jack.elliott at gmail.com (Jack Elliott)
Date: Wed, 22 Nov 2023 09:13:13 -0600
Subject: [Icecast] Restart or reload Icecast after changing source-password?
Message-ID: <f4640ae4-7850-43c5-ac1e-3a5c187fe4b9@kpov.org>

Hi, I need to change the source-password in icecast.xml. After saving 
the file, how to I make it take effect: reload or restart? Thank you!

-- 
Jack Elliott
Director of Classical Music Programming
High Desert Community Radio
KPOV Bend, Oregon



From phschafft at de.loewenfelsen.net  Wed Nov 22 15:16:30 2023
From: phschafft at de.loewenfelsen.net (Philipp Schafft)
Date: Wed, 22 Nov 2023 15:16:30 +0000
Subject: [Icecast] Restart or reload Icecast after changing
 source-password?
In-Reply-To: <f4640ae4-7850-43c5-ac1e-3a5c187fe4b9@kpov.org>
References: <f4640ae4-7850-43c5-ac1e-3a5c187fe4b9@kpov.org>
Message-ID: <f462b81b24ee940efe7f9665f3da856832567fb1.camel@de.loewenfelsen.net>

Good morning,

On Wed, 2023-11-22 at 09:13 -0600, Jack Elliott wrote:
> Hi, I need to change the source-password in icecast.xml. After saving
> the file, how to I make it take effect: reload or restart? Thank you!

Generally Icecast supports reloading it's config to the extend of what
is possible (from a logic perspective).

So reloading is totally file for updating credentials.

Best to be done via your init system. However newer versions also
include a reload button in the admin interface. :)

With best regards,

-- 
Philipp Schafft (CEO/Gesch?ftsf?hrer)
Telephone:???????????+49.3535 490 17 92
Website:?????????????https://www.loewenfelsen.net/
Follow us:???????????https://www.linkedin.com/company/loewenfelsen/
Gesch?ftsf?hrer/CEO: Philipp Schafft

L?wenfelsen UG (haftungsbeschr?nkt)?????Registration number:
Bickinger Stra?e 21?????????????????????HRB 12308 CB
04916 Herzberg (Elster)?????????????????VATIN/USt-ID:
Germany?????????????????????????????????DE305133015

From Ben.Weddle at nashville.gov  Wed Nov 22 15:23:45 2023
From: Ben.Weddle at nashville.gov (Weddle, Ben (Library))
Date: Wed, 22 Nov 2023 15:23:45 +0000
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
Message-ID: <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>

Icecast provides an endpoint (/status-json.xsl) which returns JSON with various data, including "Now Playing". Here is a link to the documentation: https://www.icecast.org/docs/icecast-trunk/server_stats/

In your case it looks like it would be http://radio.protestbandet.dk:8000/status-json.xsl

Ben Weddle

-----Original Message-----
From: Icecast <icecast-bounces at xiph.org> On Behalf Of Thomas Jensen
Sent: Wednesday, November 22, 2023 5:48 AM
To: icecast at xiph.org
Subject: [Icecast] mediaplayer for icecast streams?

Attention: This email originated from a source external to Metro Government. Please exercise caution when opening any attachments or links from external sources.


Hi

Hope this is not too off-topic here.

I want to implement a simple mediaplayer on my website where people can listen to my radio stream.

I like simple, and the HTML <audio>-tag seems to work fine, so this is perfect for me.

But I would like to show the title of the current song playing. Is there some simple javascript or php I can use, to get this information?

Or maybe a simple mediaplayer I can implement on my web site?

https://cas5-0-urlprotect.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fprotestbandet.dk&umid=d50cc718-1d9b-40b9-8160-2261ad964db6&auth=1a6d21fc0f08666d9d61586860ead8e0225a9cfa-2d73b0a9551614a73432224aa6e62b00dce8e352


Thanks...


Thomas Jensen, Denmark

_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast


From lianergoist at vongriffen.dk  Wed Nov 22 23:13:52 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Thu, 23 Nov 2023 00:13:52 +0100
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
 <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
Message-ID: <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>

Thank you, Ben!

I was afraid it would be very complicated to get the information
extracted, but it was very simple. My only problem now is to find a way
to update the text on the webpage. I was hoping sleep(5) could do the
trick, but it does not work.

<?php
if (1) {
  $jsonobj=file("http://radio.protestbandet.dk:8000/status-json.xsl");
  //var_dump($jsonobj);
  $arr1[]=json_decode($jsonobj[0], true);
  echo '<strong>'.$arr1[0]['icestats']['source']['title'].'</strong>';
  sleep(5);
}
?>

Can anyone help? 


Thanks


-- 
Thomas Jensen, Denmark


ons, 22 11 2023 kl. 15:23 +0000, skrev Weddle, Ben (Library):
> Icecast provides an endpoint (/status-json.xsl) which returns JSON
> with various data, including "Now Playing". Here is a link to the
> documentation:
> https://www.icecast.org/docs/icecast-trunk/server_stats/
> 
> In your case it looks like it would be
> http://radio.protestbandet.dk:8000/status-json.xsl
> 
> Ben Weddle
> 
> -----Original Message-----
> From: Icecast <icecast-bounces at xiph.org> On Behalf Of Thomas Jensen
> Sent: Wednesday, November 22, 2023 5:48 AM
> To: icecast at xiph.org
> Subject: [Icecast] mediaplayer for icecast streams?
> 
> Attention: This email originated from a source external to Metro
> Government. Please exercise caution when opening any attachments or
> links from external sources.
> 
> 
> Hi
> 
> Hope this is not too off-topic here.
> 
> I want to implement a simple mediaplayer on my website where people
> can listen to my radio stream.
> 
> I like simple, and the HTML <audio>-tag seems to work fine, so this
> is perfect for me.
> 
> But I would like to show the title of the current song playing. Is
> there some simple javascript or php I can use, to get this
> information?
> 
> Or maybe a simple mediaplayer I can implement on my web site?
> 
> https://cas5-0-urlprotect.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fprotestbandet.dk&umid=d50cc718-1d9b-40b9-8160-2261ad964db6&auth=1a6d21fc0f08666d9d61586860ead8e0225a9cfa-2d73b0a9551614a73432224aa6e62b00dce8e352
> 
> 
> Thanks...
> 
> 
> Thomas Jensen, Denmark
> 
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast



From railgun.michael at gmail.com  Wed Nov 22 23:49:26 2023
From: railgun.michael at gmail.com (Railgun)
Date: Thu, 23 Nov 2023 00:49:26 +0100
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
 <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
 <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>
Message-ID: <26299327-2238-4b8b-af09-d81018e1eb65@gmail.com>

you can pull it with jQuery via javascript for example evry 10 seconds, 
and update the informations you want, at least its the way i do it.

Am 23.11.2023 um 00:13 schrieb Thomas Jensen:

> Thank you, Ben!
>
> I was afraid it would be very complicated to get the information
> extracted, but it was very simple. My only problem now is to find a way
> to update the text on the webpage. I was hoping sleep(5) could do the
> trick, but it does not work.
>
> <?php
> if (1) {
>    $jsonobj=file("http://radio.protestbandet.dk:8000/status-json.xsl");
>    //var_dump($jsonobj);
>    $arr1[]=json_decode($jsonobj[0], true);
>    echo '<strong>'.$arr1[0]['icestats']['source']['title'].'</strong>';
>    sleep(5);
> }
> ?>
>
> Can anyone help?
>
>
> Thanks
>
>


From Ben.Weddle at nashville.gov  Thu Nov 23 00:14:05 2023
From: Ben.Weddle at nashville.gov (Weddle, Ben (Library))
Date: Thu, 23 Nov 2023 00:14:05 +0000
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <26299327-2238-4b8b-af09-d81018e1eb65@gmail.com>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
 <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
 <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>
 <26299327-2238-4b8b-af09-d81018e1eb65@gmail.com>
Message-ID: <SA0PR09MB6043E70640AFA1D7F66F435E98B9A@SA0PR09MB6043.namprd09.prod.outlook.com>

Here's an example with vanilla JS (attached). I had a test file lying around and swapped your info in. You can change setInterval() to fetch as often as you like (1000 = 1 second).

Ben Weddle

-----Original Message-----
From: Icecast <icecast-bounces at xiph.org> On Behalf Of Railgun
Sent: Wednesday, November 22, 2023 5:49 PM
To: icecast at xiph.org
Subject: Re: [Icecast] mediaplayer for icecast streams?

Attention: This email originated from a source external to Metro Government. Please exercise caution when opening any attachments or links from external sources.


you can pull it with jQuery via javascript for example evry 10 seconds, and update the informations you want, at least its the way i do it.

Am 23.11.2023 um 00:13 schrieb Thomas Jensen:

> Thank you, Ben!
>
> I was afraid it would be very complicated to get the information 
> extracted, but it was very simple. My only problem now is to find a 
> way to update the text on the webpage. I was hoping sleep(5) could do 
> the trick, but it does not work.
>
> <?php
> if (1) {
>    $jsonobj=file("http://radio.protestbandet.dk:8000/status-json.xsl");
>    //var_dump($jsonobj);
>    $arr1[]=json_decode($jsonobj[0], true);
>    echo '<strong>'.$arr1[0]['icestats']['source']['title'].'</strong>';
>    sleep(5);
> }
> ?>
>
> Can anyone help?
>
>
> Thanks
>
>
_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231123/2211c96c/attachment.html>

From lianergoist at vongriffen.dk  Thu Nov 23 07:25:41 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Thu, 23 Nov 2023 08:25:41 +0100
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <SA0PR09MB6043E70640AFA1D7F66F435E98B9A@SA0PR09MB6043.namprd09.prod.outlook.com>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
 <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
 <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>
 <26299327-2238-4b8b-af09-d81018e1eb65@gmail.com>
 <SA0PR09MB6043E70640AFA1D7F66F435E98B9A@SA0PR09MB6043.namprd09.prod.outlook.com>
Message-ID: <e1c0c1b4193e209185deb8e7b3596b335bf964ae.camel@vongriffen.dk>

tor, 23 11 2023 kl. 00:14 +0000, skrev Weddle, Ben (Library):
> > Here's an example with vanilla JS (attached). I had a test file
> > lying
> > around and swapped your info in. You can change setInterval() to
> > fetch as often as you like (1000 = 1 second).

Thank you VERY much! It would have taken me days, if not weeks, to come
up with that solution. I haven't used javascript for 20 years or so...

For some odd reason it's not working when I put the script online.

This works fine:

file:///home/thomas/nowPlaying.html

but this return "Program Name Not Available":

https://horsens-garage.rocks/nowPlaying.html


Strange!

Well, I am sure I'll find a solution.

Thanks again! 


-- 
Thomas Jensen, Horsens





From Ben.Weddle at nashville.gov  Thu Nov 23 16:01:04 2023
From: Ben.Weddle at nashville.gov (Weddle, Ben (Library))
Date: Thu, 23 Nov 2023 16:01:04 +0000
Subject: [Icecast] mediaplayer for icecast streams?
In-Reply-To: <e1c0c1b4193e209185deb8e7b3596b335bf964ae.camel@vongriffen.dk>
References: <d66c160477e9cbec5fc02fdfa7d97e0cb6f74940.camel@vongriffen.dk>
 <SA0PR09MB604376F1221821AE05A6BE0A98BAA@SA0PR09MB6043.namprd09.prod.outlook.com>
 <17abc19fa260cd163c58cebae9a30c4a4436cee0.camel@vongriffen.dk>
 <26299327-2238-4b8b-af09-d81018e1eb65@gmail.com>
 <SA0PR09MB6043E70640AFA1D7F66F435E98B9A@SA0PR09MB6043.namprd09.prod.outlook.com>
 <e1c0c1b4193e209185deb8e7b3596b335bf964ae.camel@vongriffen.dk>
Message-ID: <SA0PR09MB6043E042434D6399EF21BFE998B9A@SA0PR09MB6043.namprd09.prod.outlook.com>

You are welcome! Thank the Icecast devs who make it easy to use!

Ben Weddle
________________________________
From: Icecast <icecast-bounces at xiph.org> on behalf of Thomas Jensen <lianergoist at vongriffen.dk>
Sent: Thursday, November 23, 2023 1:26 AM
To: Icecast streaming server user discussions <icecast at xiph.org>
Subject: Re: [Icecast] mediaplayer for icecast streams?

Attention: This email originated from a source external to Metro Government. Please exercise caution when opening any attachments or links from external sources.


tor, 23 11 2023 kl. 00:14 +0000, skrev Weddle, Ben (Library):
> > Here's an example with vanilla JS (attached). I had a test file
> > lying
> > around and swapped your info in. You can change setInterval() to
> > fetch as often as you like (1000 = 1 second).

Thank you VERY much! It would have taken me days, if not weeks, to come
up with that solution. I haven't used javascript for 20 years or so...

For some odd reason it's not working when I put the script online.

This works fine:

file:///home/thomas/nowPlaying.html

but this return "Program Name Not Available":

https://cas5-0-urlprotect.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fhorsens%2dgarage.rocks%2fnowPlaying.html&umid=d8e2adad-b55d-4a0f-84e9-4dfca1f5a69b&auth=1a6d21fc0f08666d9d61586860ead8e0225a9cfa-13cf6936a5bed173d0ac53bc79b24732afbd9cf2


Strange!

Well, I am sure I'll find a solution.

Thanks again!


--
Thomas Jensen, Horsens



_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231123/0e5e8191/attachment.htm>

From that.jack.elliott at gmail.com  Thu Nov 23 16:27:03 2023
From: that.jack.elliott at gmail.com (Jack Elliott)
Date: Thu, 23 Nov 2023 10:27:03 -0600
Subject: [Icecast] Icecast exploits?
Message-ID: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>

Hi,

Our radio station has an Icecast server running on a Raspberry Pi. Some 
of the radio hosts stream their live shows to the server to be put on 
the FM broadcast.

A couple of days ago I saw that someone was connecting as a 
source-client repeatedly, every 15 to 20 minutes for about two minutes, 
then disconnecting, then after another 15 or 20 minutes, connecting 
again then disconnecting. After 24 hours there had been over 160 
connect/disconnect events. No audio was sent, just connect/disconnect. I 
tracked the source to a StarLink IP address, so it could have been from 
anywhere in the world.

After some investigation we found that one of our radio hosts had 
forgotten to turn off her source-client (Audio Hijack) and it was 
responsible for the robotic connect/disconnect dance.

While investigating I naturally thought that the source password might 
have gotten into the wrong hands and perhaps some evil person was 
attacking the Icecast server. Fortunately, it was not such a problem.

But I ask if there is any history of someone with the source password 
hacking into the server computer to do Bad Things?

Thank you!

-- 
Jack Elliott
Director of Classical Music Programming
High Desert Community Radio
KPOV Bend, Oregon



From phschafft at de.loewenfelsen.net  Fri Nov 24 03:45:09 2023
From: phschafft at de.loewenfelsen.net (Philipp Schafft)
Date: Fri, 24 Nov 2023 03:45:09 +0000
Subject: [Icecast] Icecast exploits?
In-Reply-To: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>
References: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>
Message-ID: <92308ccbcb6ea23b999f4fb05357ff9d2a7cb280.camel@de.loewenfelsen.net>

Good afternoon,

On Thu, 2023-11-23 at 10:27 -0600, Jack Elliott wrote:
> [...]

> But I ask if there is any history of someone with the source password
> hacking into the server computer to do Bad Things?

There is no way to "hack into the server computer" using the source
password with only Icecast.

What you can do using the source password is to... connect a source.
Generally if you cannot trust your sources avoid using the global
source password. Give everyone a personal username and password and
only allow that on the given mount point when they are allowed to
stream to it.

At very least you should invalidate any credentials you gave someone
when that person leaves your team. ;)


With best regards,

-- 
Philipp Schafft (CEO/Gesch?ftsf?hrer)
Telephone:???????????+49.3535 490 17 92
Website:?????????????https://www.loewenfelsen.net/
Follow us:???????????https://www.linkedin.com/company/loewenfelsen/
Gesch?ftsf?hrer/CEO: Philipp Schafft

L?wenfelsen UG (haftungsbeschr?nkt)?????Registration number:
Bickinger Stra?e 21?????????????????????HRB 12308 CB
04916 Herzberg (Elster)?????????????????VATIN/USt-ID:
Germany?????????????????????????????????DE305133015

From lianergoist at vongriffen.dk  Fri Nov 24 07:51:54 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Fri, 24 Nov 2023 08:51:54 +0100
Subject: [Icecast] Benefits of SSL?
Message-ID: <737c1c6401466526ebd179f19050f43e09b68004.camel@vongriffen.dk>

I have started my radiostation on http. I have spread the word about
the radio with a http-link. Now I (think I) have learned how to use my
letsencrypt certificate, but if I change now, I will break a lot of
links.

What I have done now is to redirect the https-links on my server to
https, so you can use both http and https in front of the url to the
stream.

That means you CAN access it via http. Is that a security risk? 

I don't know much about security, but I don't see any delicate
information we need to hide in the stream. 

So, why use SSL?


From that.jack.elliott at gmail.com  Fri Nov 24 14:37:54 2023
From: that.jack.elliott at gmail.com (Jack Elliott)
Date: Fri, 24 Nov 2023 08:37:54 -0600
Subject: [Icecast] Icecast exploits?
In-Reply-To: <92308ccbcb6ea23b999f4fb05357ff9d2a7cb280.camel@de.loewenfelsen.net>
References: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>
 <92308ccbcb6ea23b999f4fb05357ff9d2a7cb280.camel@de.loewenfelsen.net>
Message-ID: <d9ffdcaf-050d-408d-b619-2483b7667768@kpov.org>

Thank you, Philipp. It was things like buffer overflow attacks once 
connected as a source that I was concerned about. It's reassuring to 
hear that Icecast server is not exploitable. The Best Practices you 
suggested are good ones, I'll discuss them with station management.

-- 
Jack Elliott
Director of Classical Music Programming
High Desert Community Radio
KPOV Bend, Oregon

On 11/23/23 9:45 PM, Philipp Schafft wrote:
> Good afternoon,
>
> On Thu, 2023-11-23 at 10:27 -0600, Jack Elliott wrote:
>> [...]
>> But I ask if there is any history of someone with the source password
>> hacking into the server computer to do Bad Things?
> There is no way to "hack into the server computer" using the source
> password with only Icecast.
>
> What you can do using the source password is to... connect a source.
> Generally if you cannot trust your sources avoid using the global
> source password. Give everyone a personal username and password and
> only allow that on the given mount point when they are allowed to
> stream to it.
>
> At very least you should invalidate any credentials you gave someone
> when that person leaves your team. ;)
>
>
> With best regards,
>


From epirat07 at gmail.com  Fri Nov 24 14:49:29 2023
From: epirat07 at gmail.com (epirat07 at gmail.com)
Date: Fri, 24 Nov 2023 15:49:29 +0100
Subject: [Icecast] Icecast exploits?
In-Reply-To: <d9ffdcaf-050d-408d-b619-2483b7667768@kpov.org>
References: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>
 <92308ccbcb6ea23b999f4fb05357ff9d2a7cb280.camel@de.loewenfelsen.net>
 <d9ffdcaf-050d-408d-b619-2483b7667768@kpov.org>
Message-ID: <4B834665-75C2-49FB-A730-47EDB89571F8@gmail.com>

On 24 Nov 2023, at 15:37, Jack Elliott wrote:

> Thank you, Philipp. It was things like buffer overflow attacks once connected as a source that I was concerned about. It's reassuring to hear that Icecast server is not exploitable. The Best Practices you suggested are good ones, I'll discuss them with station management.
>

I don?t think you can assert with absolute confidence for any system that it cannot be exploited. (Except
maybe if its formally proven, but even then it would only affect that one component, not lower levels like
the kernel its running on and so on?)

The question in itself does not make much sense honestly, as it would imply knowing about exploits in Icecast,
but if we knew of any, of course we would have fixed them already.

Note that older versions of Icecast sometimes did have security relevant issues with
varying degrees of severity. Just like with any software. You can find a list here:

https://www.cvedetails.com/vulnerability-list/vendor_id-693/Icecast.html

> -- 
> Jack Elliott
> Director of Classical Music Programming
> High Desert Community Radio
> KPOV Bend, Oregon
>
> On 11/23/23 9:45 PM, Philipp Schafft wrote:
>> Good afternoon,
>>
>> On Thu, 2023-11-23 at 10:27 -0600, Jack Elliott wrote:
>>> [...]
>>> But I ask if there is any history of someone with the source password
>>> hacking into the server computer to do Bad Things?
>> There is no way to "hack into the server computer" using the source
>> password with only Icecast.
>>
>> What you can do using the source password is to... connect a source.
>> Generally if you cannot trust your sources avoid using the global
>> source password. Give everyone a personal username and password and
>> only allow that on the given mount point when they are allowed to
>> stream to it.
>>
>> At very least you should invalidate any credentials you gave someone
>> when that person leaves your team. ;)
>>
>>
>> With best regards,
>>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From that.jack.elliott at gmail.com  Fri Nov 24 15:06:34 2023
From: that.jack.elliott at gmail.com (Jack Elliott)
Date: Fri, 24 Nov 2023 09:06:34 -0600
Subject: [Icecast] Icecast exploits?
In-Reply-To: <4B834665-75C2-49FB-A730-47EDB89571F8@gmail.com>
References: <1c810a49-52d3-4c35-85cc-8ca7999fb991@kpov.org>
 <92308ccbcb6ea23b999f4fb05357ff9d2a7cb280.camel@de.loewenfelsen.net>
 <d9ffdcaf-050d-408d-b619-2483b7667768@kpov.org>
 <4B834665-75C2-49FB-A730-47EDB89571F8@gmail.com>
Message-ID: <ee35137c-b1f2-48f5-9afe-03b06c883495@kpov.org>

Thank you Marvin.

I was aware of the internal contradiction of my question but couldn't 
think of a better way to ask whether we were aware if a source 
password-equipped Bad Actor could do harm.

Thank you for the link describing the security vulnerabilities of 
Icecast. We're running 2.4.0 and that looks pretty solid.

-- 
Jack Elliott
Director of Classical Music Programming
High Desert Community Radio
KPOV Bend, Oregon

On 11/24/23 8:49 AM, epirat07 at gmail.com wrote:
> On 24 Nov 2023, at 15:37, Jack Elliott wrote:
>
>> Thank you, Philipp. It was things like buffer overflow attacks once connected as a source that I was concerned about. It's reassuring to hear that Icecast server is not exploitable. The Best Practices you suggested are good ones, I'll discuss them with station management.
>>
> I don?t think you can assert with absolute confidence for any system that it cannot be exploited. (Except
> maybe if its formally proven, but even then it would only affect that one component, not lower levels like
> the kernel its running on and so on?)
>
> The question in itself does not make much sense honestly, as it would imply knowing about exploits in Icecast,
> but if we knew of any, of course we would have fixed them already.
>
> Note that older versions of Icecast sometimes did have security relevant issues with
> varying degrees of severity. Just like with any software. You can find a list here:
>
> https://www.cvedetails.com/vulnerability-list/vendor_id-693/Icecast.html
>
>> -- 
>> Jack Elliott
>> Director of Classical Music Programming
>> High Desert Community Radio
>> KPOV Bend, Oregon
>>
>> On 11/23/23 9:45 PM, Philipp Schafft wrote:
>>> Good afternoon,
>>>
>>> On Thu, 2023-11-23 at 10:27 -0600, Jack Elliott wrote:
>>>> [...]
>>>> But I ask if there is any history of someone with the source password
>>>> hacking into the server computer to do Bad Things?
>>> There is no way to "hack into the server computer" using the source
>>> password with only Icecast.
>>>
>>> What you can do using the source password is to... connect a source.
>>> Generally if you cannot trust your sources avoid using the global
>>> source password. Give everyone a personal username and password and
>>> only allow that on the given mount point when they are allowed to
>>> stream to it.
>>>
>>> At very least you should invalidate any credentials you gave someone
>>> when that person leaves your team. ;)
>>>
>>>
>>> With best regards,
>>>
>> _______________________________________________
>> Icecast mailing list
>> Icecast at xiph.org
>> http://lists.xiph.org/mailman/listinfo/icecast


From sub at hrfinancial.com  Fri Nov 24 23:00:37 2023
From: sub at hrfinancial.com (Postmaster)
Date: Fri, 24 Nov 2023 18:00:37 -0500
Subject: [Icecast] Benefits of SSL?
In-Reply-To: <737c1c6401466526ebd179f19050f43e09b68004.camel@vongriffen.dk>
References: <737c1c6401466526ebd179f19050f43e09b68004.camel@vongriffen.dk>
Message-ID: <000201da1f2a$0a88dcc0$1f9a9640$@hrfinancial.com>

Hi Thomas,

Why not offer both?

SSL is important so as not to be penalized by search engines that nowadays expect it on any website, more so when you have a form asking for sensitive information, as it encrypts the communication between browser and server.

Having said that, there is no reason for you not to offer both https:// and http://, all you need to do is using different ports. For instance, this station offers both:

http://radiogeneral.com:8000/radio

and

https://radiogeneral.com:8001/radio

Best,

Humberto Rodriguez
Ocala, Florida
 

-----Original Message-----
From: Icecast <icecast-bounces at xiph.org> On Behalf Of Thomas Jensen
Sent: Friday, November 24, 2023 2:52 AM
To: Icecast streaming server user discussions <icecast at xiph.org>
Subject: [Icecast] Benefits of SSL?

I have started my radiostation on http. I have spread the word about
the radio with a http-link. Now I (think I) have learned how to use my
letsencrypt certificate, but if I change now, I will break a lot of
links.

What I have done now is to redirect the https-links on my server to
https, so you can use both http and https in front of the url to the
stream.

That means you CAN access it via http. Is that a security risk? 

I don't know much about security, but I don't see any delicate
information we need to hide in the stream. 

So, why use SSL?
_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast



From dik23 at hotmail.com  Sat Nov 25 00:08:24 2023
From: dik23 at hotmail.com (Dik ....)
Date: Sat, 25 Nov 2023 00:08:24 +0000
Subject: [Icecast] Benefits of SSL?
In-Reply-To: <000201da1f2a$0a88dcc0$1f9a9640$@hrfinancial.com>
References: <737c1c6401466526ebd179f19050f43e09b68004.camel@vongriffen.dk>
 <000201da1f2a$0a88dcc0$1f9a9640$@hrfinancial.com>
Message-ID: <LOYP123MB3184D928ABCA74B62B96DCBEA8BFA@LOYP123MB3184.GBRP123.PROD.OUTLOOK.COM>

Browsers will complain if you mix https and http

Certificates are free and easy to apply, there's no reason no to use them.

It's also trivial to redirect http to https so it doesn't matter what link you've given out, just redirect

________________________________
From: Icecast <icecast-bounces at xiph.org> on behalf of Postmaster <sub at hrfinancial.com>
Sent: Friday, November 24, 2023 11:40:24 pm
To: 'Icecast streaming server user discussions' <icecast at xiph.org>
Subject: Re: [Icecast] Benefits of SSL?

Hi Thomas,

Why not offer both?

SSL is important so as not to be penalized by search engines that nowadays expect it on any website, more so when you have a form asking for sensitive information, as it encrypts the communication between browser and server.

Having said that, there is no reason for you not to offer both https:// and http://, all you need to do is using different ports. For instance, this station offers both:

http://radiogeneral.com:8000/radio

and

https://radiogeneral.com:8001/radio

Best,

Humberto Rodriguez
Ocala, Florida


-----Original Message-----
From: Icecast <icecast-bounces at xiph.org> On Behalf Of Thomas Jensen
Sent: Friday, November 24, 2023 2:52 AM
To: Icecast streaming server user discussions <icecast at xiph.org>
Subject: [Icecast] Benefits of SSL?

I have started my radiostation on http. I have spread the word about
the radio with a http-link. Now I (think I) have learned how to use my
letsencrypt certificate, but if I change now, I will break a lot of
links.

What I have done now is to redirect the https-links on my server to
https, so you can use both http and https in front of the url to the
stream.

That means you CAN access it via http. Is that a security risk?

I don't know much about security, but I don't see any delicate
information we need to hide in the stream.

So, why use SSL?
_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast

_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20231125/a932b47a/attachment.htm>

From lianergoist at vongriffen.dk  Sat Nov 25 10:13:10 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sat, 25 Nov 2023 11:13:10 +0100
Subject: [Icecast] Benefits of SSL?
In-Reply-To: <000201da1f2a$0a88dcc0$1f9a9640$@hrfinancial.com>
References: <737c1c6401466526ebd179f19050f43e09b68004.camel@vongriffen.dk>
 <000201da1f2a$0a88dcc0$1f9a9640$@hrfinancial.com>
Message-ID: <f82d066c3c071fdc6fb7514192efc0e7ee2660c7.camel@vongriffen.dk>

fre, 24 11 2023 kl. 18:00 -0500, skrev Postmaster:
> Hi Thomas,
> 
> Why not offer both?

I didn't know it was possible to do that. But of course it is, and I
have now two streams.




From lianergoist at vongriffen.dk  Sun Nov 26 08:53:31 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 26 Nov 2023 09:53:31 +0100
Subject: [Icecast] two sockets but same admin page
Message-ID: <318cf2da849c4e4dc0588a54bbc15399c3577928.camel@vongriffen.dk>

Message deleted from archives as requested by the author.



From lianergoist at vongriffen.dk  Sun Nov 26 17:58:48 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 26 Nov 2023 18:58:48 +0100
Subject: [Icecast] two sockets but same admin page
In-Reply-To: <318cf2da849c4e4dc0588a54bbc15399c3577928.camel@vongriffen.dk>
References: <318cf2da849c4e4dc0588a54bbc15399c3577928.camel@vongriffen.dk>
Message-ID: <aad9a5ae1e34a6710dccd6cc321e27888d9646e1.camel@vongriffen.dk>

s?n, 26 11 2023 kl. 09:53 +0100, skrev Thomas Jensen:
> 

I have written to icecast-owner at xiph.org and mailman at xiph.org and asked
to delete the mail, because I by accident send it before I had deleted
all the passwords... It seems like no one reads those mails :-/

If any of you can delete it, please the do asap...


Thomas Jensen


From epirat07 at gmail.com  Sun Nov 26 18:03:11 2023
From: epirat07 at gmail.com (epirat07 at gmail.com)
Date: Sun, 26 Nov 2023 19:03:11 +0100
Subject: [Icecast] two sockets but same admin page
In-Reply-To: <aad9a5ae1e34a6710dccd6cc321e27888d9646e1.camel@vongriffen.dk>
References: <318cf2da849c4e4dc0588a54bbc15399c3577928.camel@vongriffen.dk>
 <aad9a5ae1e34a6710dccd6cc321e27888d9646e1.camel@vongriffen.dk>
Message-ID: <8868D738-35A2-4CD4-A392-1212AA541E53@gmail.com>



On 26 Nov 2023, at 18:58, Thomas Jensen wrote:

> s?n, 26 11 2023 kl. 09:53 +0100, skrev Thomas Jensen:
>>
>
> I have written to icecast-owner at xiph.org and mailman at xiph.org and asked

I should get mails to icecast-owners, not sure why I did not?

> to delete the mail, because I by accident send it before I had deleted
> all the passwords... It seems like no one reads those mails :-/
>

It is nearly impossible afaik to easily delete mails from the archive,
given that the mail was already sent out to all people on the list
anyway, you really should change the passwords, even if I can figure out
how to delete it.

> If any of you can delete it, please the do asap...
>
>
> Thomas Jensen
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From lianergoist at vongriffen.dk  Sun Nov 26 18:13:44 2023
From: lianergoist at vongriffen.dk (Thomas Jensen)
Date: Sun, 26 Nov 2023 19:13:44 +0100
Subject: [Icecast] two sockets but same admin page
In-Reply-To: <8868D738-35A2-4CD4-A392-1212AA541E53@gmail.com>
References: <318cf2da849c4e4dc0588a54bbc15399c3577928.camel@vongriffen.dk>
 <aad9a5ae1e34a6710dccd6cc321e27888d9646e1.camel@vongriffen.dk>
 <8868D738-35A2-4CD4-A392-1212AA541E53@gmail.com>
Message-ID: <acb731c68c1fae88b4e4898bf7a88072f9569551.camel@vongriffen.dk>

I have of course changed the password. And I am not afraid of the mail
being in some inboxed, but I would not like to get it archieved on the
list forever... 



s?n, 26 11 2023 kl. 19:03 +0100, skrev epirat07 at gmail.com:
> 
> 
> On 26 Nov 2023, at 18:58, Thomas Jensen wrote:
> 
> > s?n, 26 11 2023 kl. 09:53 +0100, skrev Thomas Jensen:
> > > 
> > 
> > I have written to icecast-owner at xiph.org?and mailman at xiph.org?and
> > asked
> 
> I should get mails to icecast-owners, not sure why I did not?
> 
> > to delete the mail, because I by accident send it before I had
> > deleted
> > all the passwords... It seems like no one reads those mails :-/
> > 
> 
> It is nearly impossible afaik to easily delete mails from the
> archive,
> given that the mail was already sent out to all people on the list
> anyway, you really should change the passwords, even if I can figure
> out
> how to delete it.
> 
> > If any of you can delete it, please the do asap...
> > 
> > 
> > Thomas Jensen
> > _______________________________________________
> > Icecast mailing list
> > Icecast at xiph.org
> > http://lists.xiph.org/mailman/listinfo/icecast
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast