ipWhitelist HowTo

ertopps

This post is deleted!

leem2000

Hi

I recently installed MM and am viewing on screen rather than on a mirror. I’m unable to view MM in a web browser from another machine in the network. I get

This site can’t be reached
192.168.0.113 refused to connect.

I’ve gone through this topic and tried the various suggestions including turning off IPv6. No joy.
No errors or connection refused messages in the pm2 logs. I’ve run config:check and it runs clean.

netstat -lnpt
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name 
tcp        0      0 0.0.0.0:5900            0.0.0.0:*               LISTEN      -                
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      1861/electron.js 
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -

I’m trying to access with http://192.168.0.113. Ssh to the pi is fine.
Any ideas?

leem2000

Setting address: “0.0.0.0” has solved this.

openPhiL

really? this topic has 63k views, so it is litterally really annoying and problematic to a lot of people.
It is a website for a mirror, how hard do you want to make it to be set up? the website should be served to anybody who can access it. IT pros who need to secure it will be able to, without this trickery. this is bs.

lavolp3

@openPhiL
Well, suggest a better solution then. Maybe in a more constructive way.
Or just go ahead find something else.

greda

Hi everybody,

I want to connect from the outside on my maggic. I configured the config.js file like this: ipWhitelist: [“127.0.0.1”, “:: ffff: 127.0.0.1”, “:: 1”, “0.0.0.0”], // Set [] to allow all IP addresses but I don’t have remote access.
Thank you for your help.

sdetweil

@greda said in ipWhitelist HowTo:

ipWhitelist: [“127.0.0.1”, “:: ffff: 127.0.0.1”, “:: 1”, “0.0.0.0”]

u mean inside your home?

address: "0.0.0.0".
ipWhitelist:[],

127.0.0.1 means ONLY from the same box as MM on it.

greda

@sdetweil said in ipWhitelist HowTo:

u mean inside your home?

Yes inside my home.

greda

Ok thanks it 's good now.

esamecar

Hi,

sorry, this is a very long thread I stumbled upon because I had the problem that my browser told me that I cannot connect to a server only instance of mm2. The terminal output gave me an “Access denied to IP address” and printed the ip address I configured in the ipWhitelist section of the config file according to the getting started section in the documentation and the comment in the config itself.

What I was doing was following this advice:

// or add a specific IPv4 of 192.168.1.5 :
                                                                                                                        // ["127.0.0.1", "::ffff:127.0.0.1", "::1", "::ffff:192.168.1.5"],

the ip rejected was 192.168.178.42, therefore I used first

"127.0.0.1", "::ffff:127.0.0.1", "::1", "::ffff:192.168.178.42"

BUT I think I have to use (at least this is what makes it working)

"127.0.0.1", "::ffff:127.0.0.1", "::1", "192.168.178.42"

Does this make any sense to you?

Kind regards

Marco

sdetweil

@esamecar what is your address: setting?

to allow systems from OUTSIDE the MagicMirror hardware, you must use something OTHER than “localhost”

you can either use “0.0.0.0” , which means use any ip address on this machine to listen to requests
or the actual ip address (which can change )
use

ip addr

to get the address of the wifi or ethernet connected interface

THEN
you can fiddle with the whitelist …

using the whitelist (IMHO) is really only useful in a commercial setting where someone in the office MIGHT scan for open IP addresses and try to connect to a range of ports…

in my house, noone is getting on my network unless I let them …

esamecar

@sdetweil thanks for your answer

I was using “0.0.0.0” as ip addr already as advised in the documentation but could not pass the ipWhitelist section … omitting the “::ffff:” part helped. (Now everything is up and running.)

sdetweil

@esamecar ::FFFFFF is the ipv6 type filter

esamecar

@sdetweil thanks, now I understand; so omitting that part completely makes sense in an ipv4 environment I guess.