• Recent
  • Tags
  • Unsolved
  • Solved
  • MagicMirror² Repository
  • Documentation
  • 3rd-Party-Modules
  • Donate
  • Discord
  • Register
  • Login
MagicMirror Forum
  • Recent
  • Tags
  • Unsolved
  • Solved
  • MagicMirror² Repository
  • Documentation
  • 3rd-Party-Modules
  • Donate
  • Discord
  • Register
  • Login
A New Chapter for MagicMirror: The Community Takes the Lead
Read the statement by Michael Teeuw here.

ipWhitelist HowTo

Scheduled Pinned Locked Moved Tutorials
83 Posts 36 Posters 130.6k Views 34 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C Offline
    cowboysdude Module Developer @rudibarani
    last edited by Jun 25, 2017, 6:24 PM

    @rudibarani said in ipWhitelist HowTo:

    @cowboysdude Thanks for your reply. My white Lists work fine for the MM2 screen. I was looking for a way to separately limit access to the sites generated by the Remote Control and Admin interface module. Any ideas?

    Honestly the best thing to do is ask the creator of those modules ;) I don’t do the ipWhitelist.

    1 Reply Last reply Reply Quote 0
    • R Offline
      roblocksrocks @cowboysdude
      last edited by Jun 26, 2017, 3:01 AM

      @cowboysdude Maybe you’ll be able to help, I’ve tried doing [ ], I’ve tried whitelesting all IPs as shown in here, and the only thing I have been able to get to work is whitelisting specific IPV4 and IPV6 addresses. That was fine because my most used devices have static IPs anyway however the issue comes now that I have port forwarding and am trying to open it up to any IP (I am aware of the security ramifications)

      C 1 Reply Last reply Jun 28, 2017, 9:42 PM Reply Quote 0
      • O Offline
        open_book @mochman
        last edited by open_book Jun 29, 2017, 9:01 AM Jun 28, 2017, 9:28 PM

        @mochman I’m experiencing a similar problem to the one @looolz describes above.

        I can access through SSH (putty) no problem. I’ve seen the logs “Access denied to …” and added the two addresses (my laptop and mobile) to the ipWhitelist.

        I’ve also added the “…1.1/120” and “…1.1/112” to the list but I still get access denied.

        I did get both devices working for a while - but was then denied access through putty! I’d really like to be able to access through mobilebrowser for MMM-remotecontrol AND SSH for other work.

        The reason for this comment is that I checked wlan0 and I have an inett6 addr listed.

        You mention this above but don’t say what to consider next. If you’re still around and have any thoughts about this I’d appreciate it!

        resulted in me being able to connect from mobile/laptop but meant that SSH stopped working.

        sudo insert motivational.quote

        1 Reply Last reply Reply Quote 0
        • C Offline
          cowboysdude Module Developer @roblocksrocks
          last edited by Jun 28, 2017, 9:42 PM

          @roblocksrocks Lets see if @mochman answers because honestly I don’t use it and really have no working knowledge of it or how to use it.

          1 Reply Last reply Reply Quote 0
          • M Offline
            mochman Module Developer
            last edited by mochman Jun 30, 2017, 5:36 PM Jun 30, 2017, 5:34 PM

            @open_book The ipWhitelist should have no affect on your SSH ability. This sounds like there is some problem with either your network or the pi itself. The ipWhitelist just affects what can connect to the MagicMirror software.

            Can you give me your network setup and how you’re trying to access it through SSH? I’m guessing that you are trying to SSH in from inside your network and not from somewhere else.

            I haven’t used the remote control module so I’m not to sure how it works with the whitelist. From how you’re describing it, it sounds like whatever the IP of the device you use the remote control with is what the MagicMirror needs whitelisted. If that’s the case, are you just trying to access your mirror from devices on your internal network or are you using a data plan with your mobile? If so, that IP probably changes frequently.

            Those IPs you listed ("...1.1/120"), are those IPv6 or IPv4 IPs?

            1 Reply Last reply Reply Quote 2
            • O Offline
              open_book
              last edited by open_book Jul 2, 2017, 8:18 PM Jul 2, 2017, 7:32 PM

              Hi @mochman thanks for your reply!

              You’re correct that I’m SSH’ing to the mirror from within my home network. I use putty from a laptop that is connected to my wireless router and uses an IPv4 address. The setup looks like this if I run ipconfig from the laptop:

              Link-local IPv6 Address . . . . . : XXXX::XXXXX:XXXX:XXXX:XXXX%XX
              IPv4 Address. . . . . . . . . . . : 192.168.X.XX
              Subnet Mask . . . . . . . . . . . : 255.255.255.0
              Default Gateway . . . . . . . . . : 192.168.X.X

              I can gain access through my mobile and laptop as long as I open for all devices. But as soon as I limit it to even a broad range of ip addresses - they get shut out.

              Here’s the setup on the mirror:

              wlan0: mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
              link/ether XX:XX:XX:XX:XX:XX XXX ff:ff:ff:ff:ff:ff
              inet 192.168.0.19/24 brd 192.168.0.255 scope global wlan0
              valid_lft forever preferred_lft forever
              inet6 XXXX::XXXX:XXXX:XXXX:XXXX/XX scope link
              valid_lft forever preferred_lft forever

              Here’s the full ipWhitelist I’m trying at the moment:

              [“127.0.0.1”, “::ffff:127.0.0.1”, “::fff:192.168.1.1/112”, “::1”, “::ffff:192.168.1.1/120”, “::ffff:192.168.0.14”, “::ffff:192.168.0.16”]

              Any tips, or anything else I can supply to help?

              EDIT: mobile ip config looks the same as the laptop ip config.

              sudo insert motivational.quote

              1 Reply Last reply Reply Quote 0
              • M Offline
                mochman Module Developer
                last edited by Jul 4, 2017, 12:48 PM

                @open_book Just looking at your pi’s IP. It looks like it’s using 192.168.0.X and you’re whitelisting the 192.168.1.X IPs. Can you try adding

                "::ffff:192.168.0.1/120", "192.168.0.1/24"
                

                to your whitelist and see if that fixes it up?

                O M 2 Replies Last reply Jul 22, 2017, 9:01 PM Reply Quote 3
                • O Offline
                  open_book @mochman
                  last edited by Jul 22, 2017, 9:01 PM

                  @mochman sorry for the slow reply. I’ve been on holiday.

                  Wanted to let you know that your suggestion fixed my problem. I added your suggested IPs and now I can both access through SSH and through a mobile device/browser.

                  Thanks for your replies!

                  sudo insert motivational.quote

                  1 Reply Last reply Reply Quote 0
                  • M Offline
                    Mykle1 Project Sponsor Module Developer @mochman
                    last edited by Aug 27, 2017, 1:04 AM

                    @mochman said in ipWhitelist HowTo:

                    see if that fixes it up?

                    I don’t have a problem with my Whitelist but a couple of people have lately. I wonder if they bother searching the forum and/or read topics such as this.

                    Anyway, nice work @mochman :-)

                    Create a working config
                    How to add modules

                    1 Reply Last reply Reply Quote 0
                    • P Offline
                      pingywon
                      last edited by Aug 27, 2017, 1:14 AM

                      LOL. Not sure if you mean me, but yes I have read this thread from beginning to end and it doesnt resolve my white list issues. This for whole forum is not that big. I’d be willing to bet I have read most of it

                      1 Reply Last reply Reply Quote 0
                      • 1
                      • 2
                      • 3
                      • 4
                      • 5
                      • 6
                      • 7
                      • 8
                      • 9
                      • 4 / 9
                      • First post
                        Last post
                      Enjoying MagicMirror? Please consider a donation!
                      MagicMirror created by Michael Teeuw.
                      Forum managed by Sam, technical setup by Karsten.
                      This forum is using NodeBB as its core | Contributors
                      Contact | Privacy Policy