Blog only for intranet

[Ritu K]

Hi,

Is there a way you can restrict all the IP addresses other than the ones within your intranet, to access the url of your blog?

Thanks!

-Ritu

[geezenslaw]

Hello Ritu, I'm not a networking engineering expert but if you mean intranet IPs such as IPV4 class: A, B, or C e.g. 192.168.0.0/24 or some such IP range then if your intranet is governed by any type of firewall or proxy or preferably both then publicly routable IP addresses such as 208.240.64.1 would not be able to access your blog. The only route in would be via VPN or some type of HTTP tunnel. Case-in-point: I setup a Pebble today at my work-site just for purposes of using the blog to report project work progress. I never gave it another thought that the web site would be available to anyone outside of our intranet. Try it for yourself and let me know if you can access the following url: http://10.1.1.65:9090/pebble. Please advise, David.


Ritu K <rpkale@...> wrote ..

>
> Hi,
>
> Is there a way you can restrict all the IP addresses other than the ones
> within your intranet, to access the url of your blog?
>
> Thanks!
>
> -Ritu
> --
> View this message in context: http://www.nabble.com/Blog-only-for-intranet-tp24433566p24433566.html
> Sent from the pebble-user mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge  
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize  
> details at: http://p.sf.net/sfu/Challenge
> _______________________________________________
> Pebble-user mailing list
> Pebble-user@...
> https://lists.sourceforge.net/lists/listinfo/pebble-user

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Pebble-user mailing list
Pebble-user@...
https://lists.sourceforge.net/lists/listinfo/pebble-user

[Olaf Kock-3]

> Ritu K <rpkale@...> wrote ..
>> Hi,
>>
>> Is there a way you can restrict all the IP addresses other than
>> the ones within your intranet, to access the url of your blog?

If limiting access by IP is required, I'd look at tomcat or apache level
(if you operate tomcat 'behind' an apache installation, e.g. with mod_jk
or mod_proxy) and make sure tomcat itself is only accessible from that
apache box.

Pebble has the possibilities to assign readers to blogs, so that you
should be able to use the permissions in pebble itself as access
control. I've not used this myself, but would expect this to solve the
problem on an account-by-account level (of course your readers would
need an account then, allowing only certain IP addresses would be more
convenient for intranet people as it wouldn't require an account)

If your installation is on a private network (see below) that is not
willingly made accessible through some "reverse NAT" configuration you
should be safe without any other measures. Note: I'd not post
confidential information and rely only on IP address range check to
protect this information. The security is about the same as posting a
confidential note in the company kitchen where it will not be seen from
the street but any visitor will be able to see it easily. If you can
live with this - fine!

david@... schrieb:
> I setup a Pebble today at my work-site just for purposes of
> using the blog to report project work progress.
> I never gave it another thought that the web site would
> be available to anyone outside of our intranet. Try it
> for yourself and let me know if you can access the
> following url: http://10.1.1.65:9090/pebble.

The 10.x.x.x as well as 192.168.x.x networks (plus more that I'd have to
look up) are unroutable through the internet - these addresses are
available for local networks and used many times worldwide. As the
addresses are not unique there's no way for anybody knowing how to
access them.

One would require a publicly available proxy server for your company in
order to get to that site, but I'd consider this scenario as nonexisting
for the purpose of this answer.

Cheers,
Olaf


------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Pebble-user mailing list
Pebble-user@...
https://lists.sourceforge.net/lists/listinfo/pebble-user