Problem - UI is available from outside

[dror]

Thats a walkaround.
Let me explain, the internet cable spot (only one in the house) is localed in a basement where WIFI can't get out ( basement with thick walls), so I want to avoid using WIFI there.

[dror]

OK

this is what I added:

iptables -A OUTPUT -o eth0 -j ACCEPT # allow all outputs
iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # allow inputs for ESTABLISHED,RELATED only
iptables -A INPUT -i eth0 -p icmp -j ACCEPT # allow ping inputs (including NEW)
iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT # allow SSH inputs (including NEW)
iptables -A INPUT -i eth0 -s XX.XX.XXX.XXX -j ACCEPT # for specific IP allow all (this is my PC)
iptables -A INPUT -i eth0 -j DROP # drop everything else

works fine for now, and I can no longer connect to web UI when I'm not on my PC or wlan0 interface

[frengo]

Hello.

I was very puzzled by what I've read on this topic.

I just need the contrary, to reach Runeaudio UI from the mobile web with non static IP devices (possibly just me, not all people, unless you are using at least one user name and password).

You recommended to use Open VPN or you could use the Dror problem for my purpose (hi) ?

Security, frankly I do not care, it would be interested ease to reach Runeaudio from the mobile web, via the UI using a PC with Windows XP or smartphone with Android.

I read that Open VPN runs on Windows and Linux platforms.

Has anyone tried to install Open VPN on RuneAudio OS in order to reach and control RuneAudio from mobile web (as if it were on the local LAN)?

Thanks in advance.

[frengo]

up

[dror]

Hello

I don't know what openVPN is, but if you have my configuration (see earlier posts) then you can set IPTABLES rules for specific MAC address:

iptables -A INPUT -i eth0 -m mac --mac-source XX:XX:XX:XX:XX:XX -j ACCEPT # for specific MAC allow all

and use the phone's MAC address. Haven't tested this though.
Also I'm not sure for security issues, but I think it should be fine.

dror

[hondagx35]

Hi dror,

to get your RuneAudio puplic available you have to do:

- change your network profile to statis IP address
- go to your routers config page
- forward port 80 to your PI (static IP address)
- search for your public IP address 1)
- open your mobile browser
- navigate to
http://your-public-IP
- enjoy your public available RuneAudio

1) you can use something like to get a fixed URL for your network (so called "Dynamic DNS")

Further readings:
https://en.wikipedia.org/wiki/Port_forwarding
http://www.noip.com/support/knowledgeba ... ing-guide/

WARNING: From here your Pi is available for everyone who finds out your public IP!

public-RA.png (89.49 KiB) Viewed 1254 times

Frank

[dror]

Hi Frank,

First, it's frengo's question
Second, I thing he didn't ask for his Rune to be public available, only available to his phone

Dror

[hondagx35]

[dror]