Home of the Squeezebox™ & Transporter® network music players.
Page 12 of 12 FirstFirst ... 2101112
Results 111 to 117 of 117
  1. #111
    Senior Member
    Join Date
    Feb 2011
    Location
    Cheshire, UK
    Posts
    2,916
    Quote Originally Posted by Jeff07971 View Post
    I don't think d6jg will have a problem, I think he uses the same system as I.
    I tried accessing via both IPSEC and SSL (To iPhone with iPeng ) and had no problems playing etc though I have not tried "settings"
    I could not work out how to see the accessing IP in the log ( I tried Plugin:cli @ info level logging ) though.

    Jeff
    Jeff is correct. I have no problem because I use high end kit.
    I was just saying that router & vpn is actually more common than you would think.
    DJanGo - I am more than familiar with DMZ and public IP assignment thank you.


    Sent from my iPhone using Tapatalk
    Pi3 pCp/LMS storage QNAP TS419p (NFS)
    Living Room - Joggler & SB3 -> Onkyo TS606 -> Celestion F20s
    Office - Pi3+Sreen -> Sony TAFE320 -> Celestion F10s / Pi2+DAC & SB3 -> Onkyo CRN755 -> Wharfedale Modus Cubes
    Dining Room -> SB Boom
    Kitchen -> UE Radio (upgraded to SB Radio)
    Bedroom (Bedside) - Pi2+DAC ->ToppingTP21 ->AKG Headphones
    Bedroom (TV) - SB Touch ->Sherwood AVR ->Mordaunt Short M10s
    Everything controlled by iPeng

  2. #112
    Senior Member
    Join Date
    Feb 2011
    Location
    Cheshire, UK
    Posts
    2,916
    Quote Originally Posted by mherger View Post
    > My gateway is also my VPN server. It may be more common than you think.

    Are you saying you're facing any issue due to these recent changes?

    I said it wasn't common because I doubt there are many LMS users using a
    VPN. That simple. And in a VPN situation you would dial in to the
    router, but AFAIK the client would receive its own IP address from
    through the VPN. In that case LMS would not see the gateway's address
    but the one of the remote client.

    --

    Michael
    No issues Michael. I use site to site IPSEC and SSL client VPNs via Draytek Vigor router that is also a VPN server.
    I was simply saying that router & vpn on the same device may be a little more common than you might think.


    Sent from my iPhone using Tapatalk
    Pi3 pCp/LMS storage QNAP TS419p (NFS)
    Living Room - Joggler & SB3 -> Onkyo TS606 -> Celestion F20s
    Office - Pi3+Sreen -> Sony TAFE320 -> Celestion F10s / Pi2+DAC & SB3 -> Onkyo CRN755 -> Wharfedale Modus Cubes
    Dining Room -> SB Boom
    Kitchen -> UE Radio (upgraded to SB Radio)
    Bedroom (Bedside) - Pi2+DAC ->ToppingTP21 ->AKG Headphones
    Bedroom (TV) - SB Touch ->Sherwood AVR ->Mordaunt Short M10s
    Everything controlled by iPeng

  3. #113
    Senior Member Mnyb's Avatar
    Join Date
    Feb 2006
    Location
    Vństerňs Sweden
    Posts
    16,227
    Quote Originally Posted by d6jg View Post
    No issues Michael. I use site to site IPSEC and SSL client VPNs via Draytek Vigor router that is also a VPN server.
    I was simply saying that router & vpn on the same device may be a little more common than you might think.


    Sent from my iPhone using Tapatalk
    Yes my linksys router has open vpn built in , and thats what iĺm using the wrt1900ac is quite common?

    But iĺm out on site work will test later if it still works for me
    --------------------------------------------------------------------
    Main hifi: Touch + CIA PS +MeridianG68J MeridianHD621 MeridianG98DH 2 x MeridianDSP5200 MeridianDSP5200HC 2 xMeridianDSP3100 +Rel Stadium 3 sub.
    Bedroom/Office: Boom
    Kitchen: Touch + powered Fostex PM0.4
    Misc use: Radio (with battery)
    iPad1 with iPengHD & SqueezePad
    (spares Touch, SB3, reciever ,controller )
    server HP proliant micro server N36L with ClearOS Linux

    http://people.xiph.org/~xiphmont/demo/neil-young.html

  4. #114
    Senior Member
    Join Date
    Nov 2010
    Location
    Hertfordshire, UK
    Posts
    2,638
    Quote Originally Posted by DJanGo View Post
    @Tim:
    The "clever" People are the People that causes Michael to open this Thread and thinks about a "solution" or minimize the worst case szenario.

    AFAIK Michael wants a solution that the settings from LMS (even when the LMS Server IP & Ports are forwarded to the Internet) are "safer" then now.

    Your idea (completly disable the access except for "known" IPs) sounds clever and might be a better solution, but (the people we are talking about) would redo these changes (if MIcheal would add them in a next Version) cause that would stopp these people to access their LMS from allover the World.

    Since setting up a VPN isnt that easy/simple and we're dealing with lots of different devices and usecases..
    OK - thanks.
    Never having set up a VPN I think that for solo usage like mine, SSH using public keys seems to be the simplest solution that should be reasonably secure.
    LMS 7.9.1 on VortexBox Midi box, Xubuntu 17.10, FLACs 16->24 bit, 44.1->192kbps. Touch & EDO. 2nd Touch standard.
    LMS plugin UPnP/DLNA Bridge to MF M1 CLiC (to A308CR amp & ESLs) & Marantz CR603 UPnP renderers.
    Alternatively Minimserver & Upplay to same & to upmpdcli/mpd PC renderers.
    Squeezelite to Meridian USB Explorer DAC to PC speakers/headphones.
    Wireless Xubuntu 17.10 laptop firefox/upplay or Android 'phone with Squeeze-Commander/BubbleUPnP controls LMS/Minimserver.

  5. #115
    Senior Member
    Join Date
    Dec 2005
    Location
    Sutton Coldfield, UK
    Posts
    538

    Am I safe?

    I have been using my Synology NAS, which sits behind my cable TV router, as a VPN Server for connections to my LAN from remote locations.

    The only use I have for this is for using LMS/Player combinations, usually but not exclusively on my Android Phone, on the rare occasions that I am away from home.

    The only port that is open on my router is that which is required by the Synology NAS VPN plugin and this port is forwarded by my cable TV router.

    I have been following, but not fully understanding this thread, for quite a while and thought I'd better ask the question.

    I'm not sure I'm up to setting up and understanding all the logging that is needed to examine this issue and it wouldn't be too much of a wrench for me to simply stop doing this as I must admit my use is rather more experimental than useful.

    My only significant discovery has been that my free hospital wifi blocks the Synology VPN port and I have to revert to a 4G phone connection which can be expensive if used for any significant time.
    Music Store: Synology DS215J NAS
    Home Server/Player:
    LMS 7.9.1 on Pi 3B piCorePlayer v3.22 Server/IQAudio DAC+/Amp+
    Portable Server/Player: LMS 7.9.1 on HP-DV2700 Laptop/Ubuntu 17.10 with synced music drive.
    Homeplug LAN Players: Pi 3B piCorePlayer v3.22/HDMI/Jivelite, Squeezelite on Windows 10 PC
    UPNP Wifi Players: Chromecast Audio/Video, Revo Super-Connect Radio, GGMM-E5 portable
    VPN Player: SqueezePlayer on Android Phone

  6. #116
    Babelfish's Best Boy mherger's Avatar
    Join Date
    Apr 2005
    Location
    Switzerland
    Posts
    19,840

    IMPORTANT: Stop forwarding your LMS ports to theinternet!

    > I have been following, but not fully understanding this thread, for
    > quite a while and thought I'd better ask the question.


    I think if you're using VPN to access your LMS at home, then you're on
    the safe side. Nothing to log or investigate.

    --

    Michael

  7. #117
    Senior Member
    Join Date
    Dec 2005
    Location
    Sutton Coldfield, UK
    Posts
    538
    Quote Originally Posted by mherger View Post
    >
    I think if you're using VPN to access your LMS at home, then you're on
    the safe side. Nothing to log or investigate.

    --

    Michael
    Thanks Michael.
    Music Store: Synology DS215J NAS
    Home Server/Player:
    LMS 7.9.1 on Pi 3B piCorePlayer v3.22 Server/IQAudio DAC+/Amp+
    Portable Server/Player: LMS 7.9.1 on HP-DV2700 Laptop/Ubuntu 17.10 with synced music drive.
    Homeplug LAN Players: Pi 3B piCorePlayer v3.22/HDMI/Jivelite, Squeezelite on Windows 10 PC
    UPNP Wifi Players: Chromecast Audio/Video, Revo Super-Connect Radio, GGMM-E5 portable
    VPN Player: SqueezePlayer on Android Phone

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •