Read the statement by Michael Teeuw here.
ipWhitelist HowTo
-
@looolz When you run the mirror through VNC. If you leave the terminal open then try to open the mirror on your other computer, do you see the
“This device is not allowed to access your mirror.
Please check your config.js or config.js.sample to change this.”message? If so, does anything pop up in your terminal?
Another thing to look at, if you run
ifconfig
and take a look at your wlan0 (assuming you are using wifi to get internet) do you see a “inet6 addr:”? If not, just try adding"10.0.0.95"
to the whitelist. -
A way to tell if you need to use
"::ffff:192.168.1.120"
or just"192.168.1.120"
Runnetstat -lnpt
, if you see something like:tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1271/electron.js
Then you are using IPv4 and should add
"YO.UR.IP.AD"
or"YO.UR.IP.AD/24"
to the whitelist.If you see:
tcp6 0 0 :::8080 :::* LISTEN 1170/electron.js
You are using IPv6 address schemas and need to add
"::ffff:YO.UR.IP.AD"
or"::ffff:YO.UR.IP.AD/120"
to the whitelist.
If you have IPv6 and want to turn it off, add
ipv6.disable=1
to your/boot/cmdline.txt
and restart your pi. -
Not a fan of this addition; would have rathered it was something you enable rather than disable.
For anyone wondering how to allow all ips, use:
ipWhitelist: ["::fff:0.0.0.0/1", "::fff:128.0.0.0/2", "::fff:192.0.0.0/3", "::fff:224.0.0.0/4", "127.0.0.1", "::ffff:127.0.0.1", "::1"],
-
Thanks! That worked for me!
-
Thanks, I do see a inet6 address with the command ifconfig.
I tried to add 10.0.0.95 to the config with no success :-(
But @xer0design’s tip worked!
-
@xer0design verry nice thx!
-
This post is deleted! -
@mochman I have put “/24” in my ipWhitelist. Looking around the forum, I’ve seen that “/120” might help. What I have now seems to be working for my devices, so is there a difference between “/24” and “/120” that I should know about? Which is better?
-
@AAPS If /24 is working for you then stick with it. The /120 just allows less IPs the ability to access your mirror.
If you aren’t forwarding your pi’s ports outside your local network it really shouldn’t matter.
-
Hi all, anybody else having trouble accessing the mirror remotely? I have reinstalled mm (development branch and nodejs v7.7.3), default config. only added allow access from my “lan”.
The mirror shows up on the local screen, so it works.Mirrors IP: 10.0.0.112/24
ipWhitelist: ["::ffff:10.0.0.1/120", "127.0.0.1", "::ffff:127.0.0.1", "::1"],
Still I get
0|mm | Access denied to IP address: 10.0.0.99
In the log.
My client IP: 10.0.0.99/24
Just to be sure, here is my full config:
/* Magic Mirror Config Sample * * By Michael Teeuw http://michaelteeuw.nl * MIT Licensed. */ var config = { port: 8080, ipWhitelist: ["::ffff:10.0.0.1/120", "127.0.0.1", "::ffff:127.0.0.1", "::1"], language: "en", timeFormat: 24, units: "metric", modules: [ { module: "alert", }, { module: "updatenotification", position: "top_bar" }, { module: "clock", position: "top_left" }, { module: "calendar", header: "US Holidays", position: "top_left", config: { calendars: [ { symbol: "calendar-check-o ", url: "webcal://www.calendarlabs.com/templates/ical/US-Holidays.ics" } ] } }, { module: "compliments", position: "lower_third" }, { module: "currentweather", position: "top_right", config: { location: "New York", locationID: "", //ID from http://www.openweathermap.org appid: "YOUR_OPENWEATHER_API_KEY" } }, { module: "weatherforecast", position: "top_right", header: "Weather Forecast", config: { location: "New York", locationID: "5128581", //ID from http://www.openweathermap.org appid: "YOUR_OPENWEATHER_API_KEY" } }, { module: "newsfeed", position: "bottom_bar", config: { feeds: [ { title: "New York Times", url: "http://www.nytimes.com/services/xml/rss/nyt/HomePage.xml" } ], showSourceTitle: true, showPublishDate: true } }, ] }; /*************** DO NOT EDIT THE LINE BELOW ***************/ if (typeof module !== "undefined") {module.exports = config;}
Everything is default, no modules installed… What am I missing?!