And it also requires that you access mythweb via port 5080 which may or
may not be an option for some people depending on where they plan to be
connecting to mythweb from (i.e. behind a firewall at work that only
allows port 80 outbound). Using apache as a proxy allows you to
still access mythweb on the standard port 80 which should pretty much
always be accessible.<br><br><div><span class="gmail_quote">On 9/2/05, <b class="gmail_sendername">Brady</b> <<a href="mailto:liquidgecka@gmail.com">liquidgecka@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Wow! Everybody loves complicated solutions!<br><br>Try this one out:<br><br>As root run this command on the firewall,<br><br>iptables -A PREROUTING -t nat -p tcp -i <inf> --dport 5080 -j DNAT<br>--to <ip address:port>
<br><br>Replacing <inf> with the interface, like eth0 or eth1, of the Internet<br>card, and ipaddress:port with the ip address and port of the mythweb<br>server.<br><br>Then to get really secure you can setup a .htpassword and .htoptions
<br>file in the mythweb's /var/www/html directory in order to require a<br>password to use mythweb. This helps prevent random modification of<br>your settings.<br><br>I use this extensively and it works great =)<br><br>It also requires much, much less overhead than running apache as a proxy.
<br><br><br><br><br><br>On 9/1/05, Brett Grice <<a href="mailto:badluck_boy@yahoo.com.au">badluck_boy@yahoo.com.au</a>> wrote:<br>> I would also seriously consider using something like<br>> mod_security with apache you can find it here
<br>> <a href="http://www.modsecurity.org">http://www.modsecurity.org</a>.<br>><br>> Also lots of info on locking down apache correctly.<br>><br>> just my 2 cents worth<br>><br>> Brett.<br>><br>>
<br>> --- Marty Ravell <<a href="mailto:mythtv@rave-tech.com.au">mythtv@rave-tech.com.au</a>> wrote:<br>><br>> > This maybe a little O.T. but I'd like to open up<br>> > MythWeb to the net as well.<br>
> > The issue for me however is that my Myth box sits<br>> > inside my Home LAN with<br>> > another Linux box being my Firewall. Now I do run my<br>> > personal website on the<br>> > firewall and am wondering how to go about letting
<br>> > Myth through when there is<br>> > already a webserver on the machine that is the<br>> > gateway to the internet.<br>> ><br>> ><br>> ><br>> > Would it be possible perhaps to use the firewall's
<br>> > Apache to talk to the<br>> > Myth box for MythWeb? Does the MythWeb web server<br>> > need to be on the same<br>> > machine as the MythTV installation?<br>> ><br>> ><br>> >
<br>> ><br>> ><br>> ><br>> ><br>> > Regards<br>> ><br>> > Marty<br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> ><br>> >
<br>> ><br>> ><br>> > > _______________________________________________<br>> > mythtv-users mailing list<br>> > <a href="mailto:mythtv-users@mythtv.org">mythtv-users@mythtv.org</a><br>> >
<br>> <a href="http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users">http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users</a><br>> ><br>><br>><br>> Send instant messages to your online friends <a href="http://au.messenger.yahoo.com">
http://au.messenger.yahoo.com</a><br>> _______________________________________________<br>> mythtv-users mailing list<br>> <a href="mailto:mythtv-users@mythtv.org">mythtv-users@mythtv.org</a><br>> <a href="http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users">
http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users</a><br>><br>_______________________________________________<br>mythtv-users mailing list<br><a href="mailto:mythtv-users@mythtv.org">mythtv-users@mythtv.org</a><br>
<a href="http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users">http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users</a><br></blockquote></div><br>