<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Nov 29, 2013 at 7:51 AM, Stephen P. Villano <span dir="ltr"><<a href="mailto:stephen.p.villano@gmail.com" target="_blank">stephen.p.villano@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div><div class="h5">
<br>
<div>On 11/28/13, 9:55 AM, Matthias Thyroff
wrote:</div></div></div><blockquote type="cite"><div><div class="h5">
<div class="gmail_quote">"Stephen P. Villano"
<a href="mailto:stephen.p.villano@gmail.com" target="_blank"><stephen.p.villano@gmail.com></a> schrieb:
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <br>
<div>On 11/28/13, 7:47 AM, Paul Clark
wrote:</div><blockquote type="cite"><div dir="ltr"><div class="gmail_extra">
<div class="gmail_quote">On 27 November 2013 15:03, R.
G. Newbury <span dir="ltr"><<a href="mailto:newbury@mandamus.org" target="_blank">newbury@mandamus.org</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On
11/27/2013 04:25 AM, Simon Hobson wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> If you then want to
charge into that part of the map marked 'Here
be Dragons', you can add port forwarding to
your router for external access for mythweb,<br>
</blockquote>
</blockquote>
</blockquote>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
But you **MUST** protect MythWeb from bots - eg
add passworded access to Apache. If a bot crawls
your recorded programs page, there's a "Delete"
link for every recorded program. Similarly,
there's a "Don't Record" and "Never Record" link
against every rule on your Recordings Rules page.
Having those crawls is likely to significantly
reduce the WAF !<br>
</blockquote>
<br>
That's one of the Dragons. Well, more like a
scorpion hiding in the grass!
</blockquote>
<div><br>
</div>
<div>Just an idea (as someone who had this happen to
them) but shouldn't a dev add a directive to mythweb
to tell the bots not to crawl it? Not sure how
these things work but there's a page <a href="http://en.wikipedia.org/wiki/Robots_exclusion_standard" target="_blank">here</a>
that seems to explain it. </div>
</div>
<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
The robots.txt file would stop a "law abiding" service like
Google, it wouldn't stop non-compliant spiders, malware or
nefarious individuals.<br>
<pre><hr></pre></blockquote></div><br>
Well I do not know what others think about this, but my Apache at
home is purely private and serves web pages outside home only via
SSL and password protected.<br>
<br>
<br>
-- <br>
Diese Nachricht wurde von meinem Mobiltelefon mit Kaiten Mail
gesendet.
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
</pre>
</blockquote>
Mine has no exposure to the internet, it's all private network and
well away from the DMZ.<br>
If I do put something onto the DMZ, it'd be a VPN connection only.<br>
Can't be too careful!<br>
</div>
</blockquote></div><br></div><div class="gmail_extra">One other solution which is possibly less effort to set up is ssh port forwarding. Assuming you have ssh access to your myth box from the internet:</div><div class="gmail_extra">
<br></div><div class="gmail_extra">$ ssh -L 8088:<a href="http://127.0.0.1:80">127.0.0.1:80</a> <your myth box></div><div class="gmail_extra"><br></div><div class="gmail_extra">Then go to <a href="http://localhost:8088/mythweb">http://localhost:8088/mythweb</a></div>
<div class="gmail_extra"><br></div><div class="gmail_extra">If you don't put the "mythweb" on the end you'll be redirected to localhost port 80, which will probably be a non-existant page, just add the :8088 back in.</div>
<div class="gmail_extra"><br></div><div class="gmail_extra">Not as convenient if you regularly access mythweb from the internet, but easy for occasional access.</div><div class="gmail_extra"><br></div></div>