[mythtv-users] What NOT to do to your Myth box...

Maarten mythtv at ultratux.org
Thu Jan 13 21:16:21 EST 2005


On Friday 14 January 2005 02:36, tommy wrote:
> Jeff Simpson wrote:

>
> Yep, you'd think, but it definatley didn't do this, it wiped my box
> clean... As for all the "help" thats has come in the form of replys,
> thanks, but none of the suggestions really help, what I'm trying to do is
> _replicate_ the page that is generated when I click recorded programs
> _without_ opening up the box to the world (copying the mythweb stuff and
> opening a hole to mysql), without requiring a password (reverse

I suggested the copying stuff.  That works, albeit I have my http server 
configured differently than you have.  Look, all you gotta do is tell your 
firewall that _one_ single server may access the mysql db backend, and that 
server is your apache box in the DMZ (that's what the orange I/F is called).
You can do that in different ways, and explaining them all is far OT, but an 
ssh tunnel can do it, or an IPtables forwarding rule. Then you're set.
(well, you have to tell the mythweb where to connect to, but...)
Then your db is protected, i.e. they'd have to hack your webserver first to 
get access to it.

> proxy/ssh -l...), basically I want to show the recorded programs page to
> anyone who clicks on the link a copy of the recorded programs page
> without requiring a password and without letting them access the actual
> box. I thought a wget of the page would be a cheap/easy/quick way to do
> this, boy was I ever wrong...

Hum, if you're really persistent about using your wget, I think that can be 
done if you make sure you just get the _file_ and not all links(!) that it 
offers.  So in other words, you should NOT have used the -r switch to wget. 
Don't try to sue me if it fscks it up again, but you might wanna try with 
just 'wget <file>', definitely without the -r recursive flag. Else: use scp.

> As Ivor said, "Hey it's only TV" ;-)

Hum... "only TV", sure...
I'd be crying for weeks if it'd happened to me.  Entire seasons Sopranos, Six 
Feet Under and News Radio gone, not to mention all movies...   ARGH !

Come to think of it, a configuration option to disable deleting from within 
mythweb may be a good idea...  I often showed the webinterface to friends and 
stuff and I was always afraid some wiseguy might delete a few shows when I'm 
not looking... you know how it is sometimes, especially if you leave your 
laptop for an instant to get a new beer or something...  (-:

Maarten



More information about the mythtv-users mailing list