List Info

Thread: Re: secure GUI admin port




Re: secure GUI admin port
country flaguser name
Canada
2008-05-08 01:51:10
It is the server admin GUI I was asking about.

I was hoping that it would work like the three examples you
gave, perhaps as:

>h
ttps://mail.example.tld:7443/cgi/SMserveradmin.cgi

It would solve a big problem for me if it worked that way!

----- Original Message Follows -----
From: "Jim L." <jdlimaginenet.net>
To: <surgemail-listnetwinsite.com>
Subject: Re: [SurgeMail List] secure GUI admin port
Date: Wed, 7 May 2008 19:28:14 -0400

>Neil,
>
>Are you referring to the server administration interface
or
>the user/domain  adminstration interfaces?
>
>I believe the server administration site must be on a
>dedicated port.  However, I am able to get to the
secure
>webmail, user admin, and domain  admin sites using one
>port. This works for me.
>
>https:
//mail.example.tld:7443/cgi/domadmin.cgi
>https://ma
il.example.tld:7443/cgi/user.cgi
>htt
ps://mail.example.tld:7443/scripts/webmail.exe
>
>I have left the port at the default of 7443. I could,
>however, change it if  I was so inclined and I believe
it
>would still work the same way.
>
>Jim L.
>
>
>----- Original Message ----- 
>From: "Neil Herber" <nospameton.ca>
>To: <surgemail-listnetwinsite.com>
>Sent: Wednesday, May 07, 2008 6:50 PM
>Subject: Re: [SurgeMail List] secure GUI admin port
>
>
>> Thanks for the answer - even though it isn't what
I
>> wanted to hear. I  don't understand why NetWin
doesn't
>> use virtual hosting for the various  processes,
then I
>>would only need one IP and one port. 
>> Neil
>>
>> Kevin W. Gagel wrote, on 2008-05-07 1:02 PM:
>>> You can have as many websites running from the
same
>>> address as you have ports available.
>>>
>>> The all intents and purposes the admin pages
and the
>>> webmail pages are seperate sites which is why
they use
>>>different ports. 
>>> The only way to use the same port is to use
different IP
>>> addresses and  bind
>>> each site to a single address.
>>>
>>> The fact that webmail runs from
>>> example.com/scripts/webmail.exe and the admin
pages run
>>> from example.com is meaningless except for the
port 
>>> number in use. Webmail is using the default
http port of
>>> 80 unless you switch it to use https (which
you've
>>> indicated that you did). Since that admin 
pages
>>> can't use port 80 they are access via 7025 and
thus - it
>>>works. 
>>> So, yes it applies to your case. If you want to
work
>>> around a firewall issue that you don't have
access to
>>> change then you'll have to assigne a second IP
to your
>>> nic and bind webmail to one ip and the admin to
the 
>>> other ip. Then you can use the same port
number.
>>> ----- Original Message -----
>>> From: "nospam" <nospameton.ca>
>>> To: surgemail-listnetwinsite.com
>>> Subject: Re: [SurgeMail List] secure GUI admin
port
>>> Date: Wed, 07 May 2008 11:05:57 -0500
>>>
>>>> Kevin
>>>>
>>>> Thanks for the quick answer. But is it
correct in my
>>>>case? 
>>>> I have given complete control of HTPPS to
SM and the
>>>> URL for webmail is:
>>>>
>>>> https://w
ww.example.com/scripts/webmail.exe
>>>>
>>>> The only link I can see for admin is:
>>>>
>>>> https://www.example.com
:7025/
>>>>
>>>> but that is because I am inside this
firewall that
>>>> refuses to connect me to that link. I am
hoping that it
>>>> redirects to something like:
>>>>
>>>> https:
//www.example.com:7025/scripts/admin.exe
>>>>
>>>> I can't think of why the scripts would need
dedicated
>>>> ports, except for the initial redirect.
>>>>
>>>> Neil
>>>>
>>>>
>>>> ----- Original Message Follows -----
>>>> From: "Kevin W. Gagel"
<gagelcnc.bc.ca>
>>>> To: surgemail-listnetwinsite.com
>>>> Subject: Re: [SurgeMail List] secure GUI
admin port
>>>> Date: Wed, 07 May 2008 08:38:05 -0700
>>>>
>>>>> Only if your server has more than one
IP bound to the
>>>>> nic. Otherwise the two app's would be
in conflict over
>>>>>the port. 
>>>>> ----- Original Message -----
>>>>> From: "nospam" <nospameton.ca>
>>>>> To: "surgemail-listnetwinsite.com"
>>>>> <surgemail-listnetwinsite.com> Subject: [SurgeMail
>>>>> List] secure GUI admin port Date: Wed,
07 May 2008
>>>>>10:23:16 -0500 
>>>>>> I have webmail running on the same
Windows box as SM
>>>>>> and I have set the secure webmail
port to the
>>>>>> standard HTTPS 443. Is there anyway
to also have the
>>>>>> secure admin GUI use 443? My
thinking is that the
>>>>>> answer should be yes, because they
should have
>>>>> >different URLs. But I am 6 time
zones away from the
>>>>>> server and my brain is foggy. The
reason I want to do
>>>>>> this is that local firewalls lock
down all ports
>>>>>>except standard HTTP and HTTPS. 
>>>>>> Neil
>>>>>>
>>>>>
------------------------------------------
>>>>> Kevin W. Gagel
>>
>> 
>
> 


Re: secure GUI admin port
country flaguser name
United States
2008-05-09 15:09:07
Neil,

Some of the g_*_port settings, such as g_smtp_port and
g_pop_port, allow you 
to specify not just the listening port number, but also the
listening IP 
address as well. I am not sure if this is also true for 
g_manager_secure_port and g_webmail_secure_port, but you
could give it a 
try. If it works, it would allow both of these secure sites
to use the 
standard HTTPS port. Your configuration will simply be a bit
more complex 
since you will have to list each additional IP addresses you
wish to use 
under g_webmail_secure_port.

g_manager_secure_port    10.0.0.10:443
g_webmail_secure_port    10.0.0.11:443, 10.0.0.12:443,
10.0.0.13:443, 
10.0.0.14:443

Jim L.


----- Original Message ----- 
From: "nospam" <nospameton.ca>
To: <surgemail-listnetwinsite.com>
Sent: Thursday, May 08, 2008 2:51 AM
Subject: Re: [SurgeMail List] secure GUI admin port


> It is the server admin GUI I was asking about.
>
> I was hoping that it would work like the three examples
you
> gave, perhaps as:
>
>>h
ttps://mail.example.tld:7443/cgi/SMserveradmin.cgi
>
> It would solve a big problem for me if it worked that
way!
>
> ----- Original Message Follows -----
> From: "Jim L." <jdlimaginenet.net>
> To: <surgemail-listnetwinsite.com>
> Subject: Re: [SurgeMail List] secure GUI admin port
> Date: Wed, 7 May 2008 19:28:14 -0400
>
>>Neil,
>>
>>Are you referring to the server administration
interface or
>>the user/domain  adminstration interfaces?
>>
>>I believe the server administration site must be on
a
>>dedicated port.  However, I am able to get to the
secure
>>webmail, user admin, and domain  admin sites using
one
>>port. This works for me.
>>
>>https:
//mail.example.tld:7443/cgi/domadmin.cgi
>>https://ma
il.example.tld:7443/cgi/user.cgi
>>htt
ps://mail.example.tld:7443/scripts/webmail.exe
>>
>>I have left the port at the default of 7443. I
could,
>>however, change it if  I was so inclined and I
believe it
>>would still work the same way.
>>
>>Jim L.
>>
>>
>>----- Original Message ----- 
>>From: "Neil Herber" <nospameton.ca>
>>To: <surgemail-listnetwinsite.com>
>>Sent: Wednesday, May 07, 2008 6:50 PM
>>Subject: Re: [SurgeMail List] secure GUI admin port
>>
>>
>>> Thanks for the answer - even though it isn't
what I
>>> wanted to hear. I  don't understand why NetWin
doesn't
>>> use virtual hosting for the various  processes,
then I
>>>would only need one IP and one port.
>>> Neil
>>>
>>> Kevin W. Gagel wrote, on 2008-05-07 1:02 PM:
>>>> You can have as many websites running from
the same
>>>> address as you have ports available.
>>>>
>>>> The all intents and purposes the admin
pages and the
>>>> webmail pages are seperate sites which is
why they use
>>>>different ports.
>>>> The only way to use the same port is to use
different IP
>>>> addresses and  bind
>>>> each site to a single address.
>>>>
>>>> The fact that webmail runs from
>>>> example.com/scripts/webmail.exe and the
admin pages run
>>>> from example.com is meaningless except for
the port
>>>> number in use. Webmail is using the default
http port of
>>>> 80 unless you switch it to use https (which
you've
>>>> indicated that you did). Since that admin 
pages
>>>> can't use port 80 they are access via 7025
and thus - it
>>>>works.
>>>> So, yes it applies to your case. If you
want to work
>>>> around a firewall issue that you don't have
access to
>>>> change then you'll have to assigne a second
IP to your
>>>> nic and bind webmail to one ip and the
admin to the
>>>> other ip. Then you can use the same port
number.
>>>> ----- Original Message -----
>>>> From: "nospam" <nospameton.ca>
>>>> To: surgemail-listnetwinsite.com
>>>> Subject: Re: [SurgeMail List] secure GUI
admin port
>>>> Date: Wed, 07 May 2008 11:05:57 -0500
>>>>
>>>>> Kevin
>>>>>
>>>>> Thanks for the quick answer. But is it
correct in my
>>>>>case?
>>>>> I have given complete control of HTPPS
to SM and the
>>>>> URL for webmail is:
>>>>>
>>>>> https://w
ww.example.com/scripts/webmail.exe
>>>>>
>>>>> The only link I can see for admin is:
>>>>>
>>>>> https://www.example.com
:7025/
>>>>>
>>>>> but that is because I am inside this
firewall that
>>>>> refuses to connect me to that link. I
am hoping that it
>>>>> redirects to something like:
>>>>>
>>>>> https:
//www.example.com:7025/scripts/admin.exe
>>>>>
>>>>> I can't think of why the scripts would
need dedicated
>>>>> ports, except for the initial
redirect.
>>>>>
>>>>> Neil
>>>>>
>>>>>
>>>>> ----- Original Message Follows -----
>>>>> From: "Kevin W. Gagel"
<gagelcnc.bc.ca>
>>>>> To: surgemail-listnetwinsite.com
>>>>> Subject: Re: [SurgeMail List] secure
GUI admin port
>>>>> Date: Wed, 07 May 2008 08:38:05 -0700
>>>>>
>>>>>> Only if your server has more than
one IP bound to the
>>>>>> nic. Otherwise the two app's would
be in conflict over
>>>>>>the port.
>>>>>> ----- Original Message -----
>>>>>> From: "nospam"
<nospameton.ca>
>>>>>> To: "surgemail-listnetwinsite.com"
>>>>>> <surgemail-listnetwinsite.com> Subject: [SurgeMail
>>>>>> List] secure GUI admin port Date:
Wed, 07 May 2008
>>>>>>10:23:16 -0500
>>>>>>> I have webmail running on the
same Windows box as SM
>>>>>>> and I have set the secure
webmail port to the
>>>>>>> standard HTTPS 443. Is there
anyway to also have the
>>>>>>> secure admin GUI use 443? My
thinking is that the
>>>>>>> answer should be yes, because
they should have
>>>>>> >different URLs. But I am 6 time
zones away from the
>>>>>>> server and my brain is foggy.
The reason I want to do
>>>>>>> this is that local firewalls
lock down all ports
>>>>>>>except standard HTTP and HTTPS.
>>>>>>> Neil
>>>>>>>
>>>>>>
------------------------------------------
>>>>>> Kevin W. Gagel
>>>
>>>
>>
>>
>
> 



[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )