How to set ipWhitelist for all device can acess to MagicMirror v2?

morozgrafix

@Mykle1 I will try to reproduce it once I get home and will get back to you. Hang tight.

morozgrafix

@Mykle1 Sorry about delay. It looks like your RasPi is using IPv6 and earlier I gave you instructions for IPv4. Sorry about misinformation.

For IPv6 setting ipWhitelist subnet mask to ::ffff:192.168.1.1/120 will give you access to 256 IP addresses. So your setting for ipWhitelist part in config.js would look like this:

ipWhitelist: ["127.0.0.1", "::ffff:127.0.0.1", "::1", "::ffff:192.168.1.1/120"]

After making changes restart MM and try to access from browser on your computer.

Let me know if it worked. Thanks.

Mykle1

@morozgrafix - No worries about the delay at all. I appreciate your time and assistance.

I wish I could try that right now but I have to go to work. I will try the moment I get home and let you know how I make out.
In any case, thanks for the help.

cowboysdude

Been watching this forum… Thanks guys you helped me and you didn’t even know it LOL

I have 3 mirrors running and there was no sense trying to maintain 3 … so maintain 1 and run it off the other 2… :)

Mykle1

@morozgrafix

Oh yes, that worked perfectly. I couldn’t wait to get home to try it. Thank you, very much.

If I may ask: Now that I can see MM running on the Pi3 from another computer on my network, can I merely view it or is there some control of MM that I can use remotely? If so, can you direct me to where I can find those commands? If I should ask this question elsewhere then I apologize. Kindly direct me to where I should ask, if this is the case.

Again, thank you for your assistance and time and effort on my behalf.

yawns

@Mykle1 said in How to set ipWhitelist for all device can acess to MagicMirror v2?:

@morozgrafix

can I merely view it or is there some control of MM that I can use remotely?

http://beta.magicmirror.builders/module/24/remote-control ;)

AAPS

If having “/24” in my ipWhitelist works, should it be fine without changing to “/120” ? This has been confusing me lately, so any help would be appreciated.

morozgrafix

@Mykle1 Glad it all worked out!

@AAPS Theoretically you are fine but you are whitelisting a lot of IPs. Assuming you are talking about IPv6. Here is a brief explanation example:

192.168.1.1/24 subnet mask on IPv4 network would cover IP 256 IP addresses ranging from 192.168.1.0 to 192.168.1.255.

Start IP: 192.168.1.0
End IP: 192.168.1.255
Addresses: 256
Class: Class C
Netmask: 255.255.255.0.
Binary: 11111111	11111111	11111111	00000000

::ffff:192.168.1.1/120 subnet mask on IPv6 network would also cover 256 IP addresses

Start Range: 0:0:0:0:0:ffff:c0a8:100 (IPv4 equivalent of 192.168.1.0)
End Range: 0:0:0:0:0:ffff:c0a8:1ff (IPv4 equivalent of 192.168.1.255)
Addresses: 256

Now if you have ::ffff:192.168.1.1/24 subnet mask on IPv6 network, you would allow 20282409603651670423947251286016 IPs to access your mirror. Which seems to be alot, but remember that devices most likely have to be on your home network in the first place.

Start Range: 0:0:0:0:0:0:0:0
End Range: 0:ff:ffff:ffff:ffff:ffff:ffff:ffff
Addresses: 20282409603651670423947251286016

Here is a helpful cheat sheet for IPv4 and IPv6 subnet masks: https://kthx.at/subnetmask/

Hope this helps.

AAPS

I seem to be fine, but do you recommend that I change anyway?

morozgrafix

@AAPS It’s totally your call. I don’t think it affects anything as long as your network is closed and secure.