LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-08-2012, 08:22 PM   #1
lycsailor17
LQ Newbie
 
Registered: May 2012
Posts: 5

Rep: Reputation: Disabled
Securing a siri server


I just finished setting up the three little pigs siri proxy on my ubuntu server 10.10. Its a public server, but I might have an idea to make it private. I want to be able to use the server on wifi and 3g so I know I can't only accept certain ip address on my servers. Correct me if I am wrong but mac addresses don't change right? So my question is how could I block all mac addresses except the ones of the devices that are allowed to use my server? Is something like that possible. Could someone recommend a better solution? I am new to linux.
 
Old 05-08-2012, 08:31 PM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670
MAC addresses are used on layer 2 and mean nothing outside a LAN. You can't use them for internet traffic.
 
Old 05-08-2012, 08:42 PM   #3
lycsailor17
LQ Newbie
 
Registered: May 2012
Posts: 5

Original Poster
Rep: Reputation: Disabled
how could I do it then?
 
Old 05-08-2012, 09:38 PM   #4
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670Reputation: 670
I don't know what a siri proxy server is. You will probably need to dig in its documentation to see what kind of authentication it uses. Maybe it is key or certificate based and you need to create and copy keys. Another possibility is a vpn tunnel, which would also involve certificates.

If by wifi, you are referring to your own wlan, then you can use fixed IP addresses or MAC addresses to filter access. If you meant the client may be using public wifi to access the network, then you can't. The wireless router will probably be nat'ed
so there will be several devices with the same IP source address.

You will either want the server located on the edge or in the DMZ to prevent unauthorized traffic from existing inside your LAN.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: 5 Best Free Siri Alternatives for Android LXer Syndicated Linux News 0 11-03-2011 06:51 PM
Securing a server investmentbnker75 Linux - Security 4 10-09-2008 09:50 PM
securing my server linuxhippy Slackware 17 08-20-2006 07:34 PM
securing server help shafey Linux - Security 1 07-17-2006 04:59 AM
Securing Server brentos Linux - Security 4 06-08-2004 11:57 AM


All times are GMT -5. The time now is 11:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration