CumulusMX dashboard password protect

[orfeo]

Hi All

I run my Davis VP2+ at work on a large network. My systems admin is worried that everyone can see the CumulusMX dashboard and hence change the settings, mess with SQL server etc. Is there a way to password protect the dashboard?

thanks
orfeo

[HansR]

Not that I i know of but what type of system are you running and accessing?
You're running MX so it will probably run on a system with user accounts. If it runs from a specific account: voila, there is your password.
Or do I miss something?

Best,

[orfeo]

No i'm not talking about people having access to the computer but the network its connected to. Anyone on the network can type in the IP:port of the cumulusMX website and then alter the settings etc. Not a problem if you run this at home on your small 4 port router with your family. More risky when you're in a large organisation.

thanks
orfeo

[Herbaldew]

You could edit the html to remove the settings related links. That doesn't block access to them, but you would have to know the address to manually access them rather than just clicking a link. I guess along those lines you could also delete the settings pages and just upload them when you need to use them then delete them again. I don't think I have ever touched mine since initial setup.

[beteljuice]

If you were to edit the links and pages (settings and edit) to php - then you could use something like http://www.zubrag.com/scripts/password-protect.php

[orfeo]

thanks, i just moved the settings interface files out of the interface directory. Not the best solution but it'll have to do. Will probably need to lock my IP down to a private network,

[Phil23]

Dunno if these suggestions are any good or not.

1. Put the PC that runs MX on a separate vLan & get system admins to route your IP to that PC.

2. Maybe setup a firewall rule on the router to block access to port 8998 on that PC.

Edit;

That might need to be a firewall rule on the PC with Cumulus.

Only allow your IP to access 8998.


Cheers.