Page 1 of 1
allow remote connection conf in linux
Posted: Sun Feb 09, 2020 4:46 pm
by openaspace
Hello,
I'm running the client within virtualized system on my servers in a data center.
wich is the config string to allow the client to connect remotely to the fahcore?
thanks.
Re: allow remote connection conf in linux
Posted: Sun Feb 09, 2020 8:04 pm
by bruce
Are you talking about the client downloading a FAHCore from a FAH server? FAHCient connects to the internet to download a fresh copy of a FAHCore if it can't find a local copy. It's only an issue if the connection is blocked by a firewall or if FAHClient can't write the FAHCore locally.
Incoming connections from other machines don't connect remotely to a FAHCore. The FAHCore is simply started by FAHClient with an appropriate set of parameters and then FAHClient waits for a Return Code.
All incoming remote connections are parsed by FAHClient.
FAHControl can manage multiple FAH clients on various remote IP clients from a single Windows machine. Configure them in the left Clients panel although disabling or bypassing the FAH security settings can be a bit of a pain.
Re: allow remote connection conf in linux
Posted: Mon Feb 10, 2020 3:18 am
by gordonbb
Add to config.xml one or both of:
Code: Select all
<!-- HTTP Server -->
<allow v='127.0.0.1 192.168.1.0/24'/>
<!-- Remote Command Server -->
<command-allow-no-pass v='127.0.0.1 192.168.1.0/24'/>
Substituting the IP you will be connecting from for 192.168.1.0/24
The http service is for web Control on TCP port 7396 and the remote command server is for the Python Advanced Control or Telnet access on TCP port 36330
You will have to restart the FAHclient Service to get it to read the updated config.
You may also have to adjust the firewall on the host to permit the traffic.
is a good way to test but the telnet client must be Unix friendly.
If your connecting from an external IP you will likely want to add a password but be aware as the remote command server uses telnet underneath passwords are sent in clear text so a SSH tunnel or VPN is preferred.