Issue with White list IP(s) not working :(

Mykle1

@pingywon said in Issue with White list IP(s) not working :(:

Why does it seem only a few people are having this issue?

I really can’t say why it happens to some and not others. It’s hard to troubleshoot for someone when there are so many unknowns. There are so many different setups (various Pi’s, PC’s, Mac’s, etc) all running different OS’s (various Raspbian flavors, various Windows versions, Mac OS, various uBuntu versions). This make’s it impossible for “one fix fits all” solutions. Personally, I do the best I can to help people that ask for help. There are many Whitelist topics that have been posted. I can only suggest that you use the search function here on the forum. In the meantime, someone else may have a suggestion that might work for you.

Best of luck to you

https://forum.magicmirror.builders/search?term=Whitelist&in=titlesposts

pingywon

Anyone else have any input. Im kinda stuck here. I have looked at other threads and have not drawn any conclusions

da4throux

Not my area, but I was reading this: https://forum.magicmirror.builders/topic/1326/ipwhitelist-howto/8
and it mentions that the whitelisting on a range is for IPv6 , so maybe not working with IPv4.
Hope that help

Mykle1

New post:

https://forum.magicmirror.builders/topic/4701/changing-ipwhitelist-prevents-mirror-from-loading-correctly/8

pingywon

FOUND A WAY TO RESOLVE THIS!

Add

cat /etc/modprobe.d/ipv6.conf 
# Don't load ipv6 by default
alias net-pf-10 off
# uncommented
alias ipv6 off
# added
options ipv6 disable_ipv6=1
# this is needed for not loading ipv6 driver 
blacklist ipv6

to turn off all IPv6 on the Raspi.
Than edit all the IPv6 out of your config file.

 },
        ipWhitelist: [
                "192.168.0.92",
                "192.168.0.1/24",
                "127.0.0.1"

I still have the .92 in there from testing. It is not needed.

did a sudo reboot just for safe measure and now it all seems to be working as intended. No real idea what the actual issue was…but it is resolved. FINALLY! :)

Mykle1

I just realized something. The machine I’m working on had MM 2.1.1 on it. I upgraded to MM 2.1.2 and lo and behold, the IPWhitelist is as whacked as can be. So, if I gave bad information, which I did, please excuse my oversight.
Peace!

roramirez

So, After a research about all this mess it up, the problem was a bug inside of ipfilter and MagicMirror too. When I added inside the sample config I’ve using express-ipfilter@0.2.4 In this version has a bug was fixed in 0.3.1 https://github.com/baminteractive/express-ipfilter/commit/4adc5dc33e6ef5086e36a7a56184da7cdcd056bf

The bug for MagicMirror was fixed some weeks ago,
https://github.com/MichMich/MagicMirror/commit/a7297d2685f5ed9b6b34df496065f05ee0d36568

You can using now the develop branch or install express-ipfilter previous of the 0.3.1

Mykle1

@roramirez said in Issue with White list IP(s) not working :(:

You can using now the develop branch or install express-ipfilter previous of the 0.3.1

Ahh, thank you! :^)

psteimann

@roramirez does that mean that I only have to do an

npm install express-ipfilter

from the rooter with my console, if I have the actual magic mirror installed?

tnx

Peter

rcollie

Nice one.

yours.mukul

How to white list all IP(s), to make magicmirror public??

daikaiju

Disabling IPv6 fixed the issue for me.

knubbl

where did u disable it?

bhepler

@knubbl - It will be at your router. It depends on the brand, but this sort of thing is usually in the advanced menu.

… or you could follow the instructions in the post here.

daikaiju

@knubbl https://www.leowkahman.com/2016/03/19/disable-ipv6-raspberry-raspbian/

chef

Are you giving your raspberry pi an ip address of “0.0.0.0”?

Why?

The address line should be the IP address of your pi.

Having it listen on any interface hasn’t really worked well.

Then the whitelist is an array of ip address. If you leave it empy (ex. []) then all the devices on your network will be able to access your mirror.

This is what mine looks like:

var config = {
	address: "192.168.2.48", 
	port: 8080,
	ipWhitelist: [],

This especially makes a difference when using the “Restfull-ish” API. It is necessary to give the address line an ip address :)