[opensuse] open localhost for other devices in same network only
Hi, I am developing a website on localhost (apache/php/MySQL with default install, OpenSuse 15.1) and would like to connect to it from other devices (especially my mobile phone). I'd like to be able to access all in /srv/www/htdocs/ but ONLY from my local network, e.g. devices on the same wifi, and NOT open it to the world. What must I do? (right now, when I want to connect to local IP I get "unable to ccect. Firefox can't establish a connection to the server at IP") -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-20 09:58 AM, Daniel Bauer wrote:
Hi,
I am developing a website on localhost (apache/php/MySQL with default install, OpenSuse 15.1) and would like to connect to it from other devices (especially my mobile phone).
I'd like to be able to access all in /srv/www/htdocs/ but ONLY from my local network, e.g. devices on the same wifi, and NOT open it to the world.
What must I do?
(right now, when I want to connect to local IP I get "unable to ccect. Firefox can't establish a connection to the server at IP")
I'd say get it going on the local network and then set up a firewall on it to block anything off net. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Daniel Bauer wrote:
Hi,
I am developing a website on localhost (apache/php/MySQL with default install, OpenSuse 15.1) and would like to connect to it from other devices (especially my mobile phone).
I'd like to be able to access all in /srv/www/htdocs/ but ONLY from my local network, e.g. devices on the same wifi, and NOT open it to the world.
What must I do?
Configure the website to be accessible from your local network - 192.168.x ? By default, apache is probably listening on all interfaces anyway.
(right now, when I want to connect to local IP I get "unable to ccect. Firefox can't establish a connection to the server at IP")
Is apache running ? -- Per Jessen, Zürich (18.9°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-20 10:06 AM, Per Jessen wrote:
Configure the website to be accessible from your local network - 192.168.x ? By default, apache is probably listening on all interfaces anyway.
I'm so used to working with IPv6, I forgot NAT gets in the way. If I set up a server on my network, it would have a public IPv6 address. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am 20.03.20 um 15:06 schrieb Per Jessen:
Daniel Bauer wrote:
Hi,
I am developing a website on localhost (apache/php/MySQL with default install, OpenSuse 15.1) and would like to connect to it from other devices (especially my mobile phone).
I'd like to be able to access all in /srv/www/htdocs/ but ONLY from my local network, e.g. devices on the same wifi, and NOT open it to the world.
What must I do?
Configure the website to be accessible from your local network - 192.168.x ?
Yes. But /how/ to I configure the website to be accessible from the local network?
By default, apache is probably listening on all interfaces anyway.
(right now, when I want to connect to local IP I get "unable to ccect. Firefox can't establish a connection to the server at IP")
Is apache running ?
Yes, he's running all the time. I can access it from the computer on which it is running. But not from my phone. I use the correct IP. Tried it in the browser of the actual computer: ok; from phone: "unable to connect". Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast. -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-20 11:43 AM, Daniel Bauer wrote:
Configure the website to be accessible from your local network - 192.168.x ?
Yes. But /how/ to I configure the website to be accessible from the local network?
I haven't done a lot with websites, but when I experimented with one, I just enabled it. I didn't have to specify what addresses were allowed. It just worked. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem. -- Per Jessen, Zürich (16.5°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet. I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Dave Howorth wrote:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I am working on the assumption that his mobile is on his local wifi, like mine. I also assumed it is IPv4, but it's not important. Daniel didn't complain when I used 192.168.x.x as a template :-) -- Per Jessen, Zürich (13.9°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x. I can, for example, use the App SSHelper and rsync from my phone to the computer, so in principle the connection works. I read a lot in google, open this, open that, but I am bit afraid that I could open my local server to the world... In earlier projects I uploaded the files to the online-web-server in a htaccess protected folder, but it would be much more comfortable if I could simply see how my CSS magic works using the local server... -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Daniel Bauer wrote:
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
I can, for example, use the App SSHelper and rsync from my phone to the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that I could open my local server to the world...
You don't need to worry - with IPv4, you are behind an IPv4 NAT mechanism, unless you explicitly configure it to forward stuff to your webserver, you're safe.
In earlier projects I uploaded the files to the online-web-server in a htaccess protected folder, but it would be much more comfortable if I could simply see how my CSS magic works using the local server...
Assuming you have firewalld, my first suggestion would be to shut it down, then see if your dev website works from your mobile. If it works and you are more comfortable with having firewalld running, start it up again. You just need to configure it to open port 80. I can't help with that, I don't use firewalld. -- Per Jessen, Zürich (12.9°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 19:05:08 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
I can, for example, use the App SSHelper and rsync from my phone to the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that I could open my local server to the world...
You don't need to worry - with IPv4, you are behind an IPv4 NAT mechanism, unless you explicitly configure it to forward stuff to your webserver, you're safe.
In earlier projects I uploaded the files to the online-web-server in a htaccess protected folder, but it would be much more comfortable if I could simply see how my CSS magic works using the local server...
Assuming you have firewalld, my first suggestion would be to shut it down, then see if your dev website works from your mobile. If it works and you are more comfortable with having firewalld running, start it up again. You just need to configure it to open port 80. I can't help with that, I don't use firewalld.
Doesn't firewalld automatically open a port to the local network? There's not much point in a web server that can't serve any machines except its own loopback address! (except for specialist testing purposes) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-20 02:31 PM, Dave Howorth wrote:
Doesn't firewalld automatically open a port to the local network? There's not much point in a web server that can't serve any machines except its own loopback address! (except for specialist testing purposes)
If your LAN has an RFC 1918, such as 192.168.x.y, then you will never see any connections come in from the Internet. If you have a public address, then you might. Those RFC1918 addresses are not allowed on the Internet. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 14:33:26 -0400 James Knott <james.knott@jknott.net> wrote:
On 2020-03-20 02:31 PM, Dave Howorth wrote:
Doesn't firewalld automatically open a port to the local network? There's not much point in a web server that can't serve any machines except its own loopback address! (except for specialist testing purposes)
If your LAN has an RFC 1918, such as 192.168.x.y, then you will never see any connections come in from the Internet. If you have a public address, then you might. Those RFC1918 addresses are not allowed on the Internet.
I know, but that's nothing to do with what I wrote. Please reread. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-20 03:56 PM, Dave Howorth wrote:
I know, but that's nothing to do with what I wrote. Please reread.
I'm having a hard time understanding what you're trying to do that's causing so much problem. As I mentioned, it wasn't hard to set up a web server and it wasn't hard to connect to it. What are you doing that's causing the problem? For example, you mention directories. Why is that even of interest from someone simply trying to access the server? It should be transparent. Regardless, at the moment, the addresses are irrelevant. Just set up the server so that it works. You can then start worrying about what it can access and keeping it to the local network is simply not an issue. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 16:01:52 -0400 James Knott <james.knott@jknott.net> wrote:
On 2020-03-20 03:56 PM, Dave Howorth wrote:
I know, but that's nothing to do with what I wrote. Please reread.
I'm having a hard time understanding what you're trying to do that's causing so much problem.
I'm not trying to do anything; I'm not the OP. Please generalise my request and reread the whole thread :)
As I mentioned, it wasn't hard to set up a web server and it wasn't hard to connect to it. What are you doing that's causing the problem? For example, you mention directories. Why is that even of interest from someone simply trying to access the server? It should be transparent. Regardless, at the moment, the addresses are irrelevant. Just set up the server so that it works. You can then start worrying about what it can access and keeping it to the local network is simply not an issue.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am 20.03.20 um 19:05 schrieb Per Jessen:
Daniel Bauer wrote:
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
I can, for example, use the App SSHelper and rsync from my phone to the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that I could open my local server to the world...
You don't need to worry - with IPv4, you are behind an IPv4 NAT mechanism, unless you explicitly configure it to forward stuff to your webserver, you're safe.
In earlier projects I uploaded the files to the online-web-server in a htaccess protected folder, but it would be much more comfortable if I could simply see how my CSS magic works using the local server...
Assuming you have firewalld, my first suggestion would be to shut it down, then see if your dev website works from your mobile. If it works and you are more comfortable with having firewalld running, start it up again. You just need to configure it to open port 80. I can't help with that, I don't use firewalld.
Yes, I have firewalld running, I know since 5 minutes :-) I stopped it, and - trara! - it (kind of) works. So now I have two questions: - can I open port 80 in firewalld settings (I guess I'll find them somewhere in Yast) without the risk to compromise my computer or the files that are within the local apache directory htdocs...? - what could be the reason for the "kind of" described below? Kind of: I get the connection to the server http://192.158.1.x and it show's apaches default index-page "it works". Now when I call my file http://192.158.1.x/Entwicklung/project/index.php it shows the text of the index-file, but not the images, nor does it use the CSS. I have the same result with another project that is online on my internet-webserver and that works on the webserver... On my local computer the path is /srv/www/htdocs/Entwicklung/project within the php-file pathes are relative it works on the same computer, but not on the phone (but it works on the phone when calling it from the online-internet-server) Thanks for the help. Daniel -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Sorry, my IPs are 192.168..., not 158, of course -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Daniel Bauer wrote:
Yes, I have firewalld running, I know since 5 minutes :-) I stopped it, and - trara! - it (kind of) works.
So now I have two questions:
- can I open port 80 in firewalld settings (I guess I'll find them somewhere in Yast) without the risk to compromise my computer or the files that are within the local apache directory htdocs...?
Yep. By opening port 80 on that machine, your apache webserver becomes available to your local network only.
- what could be the reason for the "kind of" described below?
Kind of: I get the connection to the server http://192.158.1.x and it show's apaches default index-page "it works".
That isn't "kind of", that's 100% success :-)
Now when I call my file http://192.158.1.x/Entwicklung/project/index.php it shows the text of the index-file, but not the images, nor does it use the CSS.
"text of the the index file" = output from your index.php ? When it doesn't show any images, what do you see instead - a placeholder or just nothing? The former would mean the image wasn't found, if you see nothing at all, something is wrong with the HTML. Not using the CSS - which is linked in from a file? Also sounds like the file isn't being found. If you look in the apache logs, you will see 404s for the files that were not found.
On my local computer the path is /srv/www/htdocs/Entwicklung/project within the php-file pathes are relative it works on the same computer, but not on the phone (but it works on the phone when calling it from the online-internet-server)
"it works on the same computer" ? so when you browse it locally, which address do you use? localhost or 192.168.x.x ? Try it from the local computer, but with 192.168.x.x - that ought to produce the same result as on your phone. Maybe then view the source (ctrl-u) and paste it somewhere for us to see. Or send it to me. -- Per Jessen, Zürich (10.7°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am 21.03.20 um 09:05 schrieb Per Jessen:
Daniel Bauer wrote:
Yes, I have firewalld running, I know since 5 minutes :-) I stopped it, and - trara! - it (kind of) works.
So now I have two questions:
- can I open port 80 in firewalld settings (I guess I'll find them somewhere in Yast) without the risk to compromise my computer or the files that are within the local apache directory htdocs...?
Yep. By opening port 80 on that machine, your apache webserver becomes available to your local network only.
Ok, I opened that port, and in fact I can reach the server when the phone is on my wifi-net, but not when it's on the phone-net. Good.
- what could be the reason for the "kind of" described below?
Kind of: I get the connection to the server http://192.158.1.x and it show's apaches default index-page "it works".
That isn't "kind of", that's 100% success :-)
Now when I call my file http://192.158.1.x/Entwicklung/project/index.php it shows the text of the index-file, but not the images, nor does it use the CSS.
"text of the the index file" = output from your index.php ?
Yes
When it doesn't show any images, what do you see instead - a placeholder or just nothing? The former would mean the image wasn't found, if you see nothing at all, something is wrong with the HTML.
I see the "missing image" icon. Styles are not applied, the font is not used, background colors and images do not appear. (Inline styles are applied - this is only a temporary page and I added some styles directly to the lines - but styles from the css-file not) https://www.daniel-bauer.com/div/Screenshot_20200321-093821.png
Not using the CSS - which is linked in from a file? Also sounds like the file isn't being found.
Yes, linked from a file.
If you look in the apache logs, you will see 404s for the files that were not found.
This is the log from the very last try. As much as I see all parts were loaded correctly. Still styles are not applied and image not shown on the mobile. 192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET /Entwicklung/karls/index2.php HTTP/1.1" 200 1724 "-" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET /Entwicklung/karls/img/logo_small.png HTTP/1.1" 200 4002 "http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET /Entwicklung/karls/css/karls.css HTTP/1.1" 200 14159 "http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET /Entwicklung/karls/scripts/karls_top.js HTTP/1.1" 200 6120 "http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET /Entwicklung/karls/scripts/karls_top.js HTTP/1.1" 200 6120 "http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET /Entwicklung/karls/img/logo_small.png HTTP/1.1" 200 4002 "http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0" 192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET /favicon.ico HTTP/1.1" 200 302 "-" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.6.0) Gecko/68.6.0 Firefox/68.6.0"
On my local computer the path is /srv/www/htdocs/Entwicklung/project within the php-file pathes are relative it works on the same computer, but not on the phone (but it works on the phone when calling it from the online-internet-server)
"it works on the same computer" ? so when you browse it locally, which address do you use? localhost or 192.168.x.x ? Try it from the local computer, but with 192.168.x.x - that ought to produce the same result as on your phone.
It works on the same computer with 192... https://www.daniel-bauer.com/div/Screenshot_20200321_094033.png
Maybe then view the source (ctrl-u) and paste it somewhere for us to see. Or send it to me.
It's not a big secret :-) https://www.daniel-bauer.com/div/index2.html.txt (I see there are some characters displayed wrong - this is because I saved to source on the phone and sent it to me as email..., originally all characters are displayed correctly) -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Daniel Bauer wrote:
Am 21.03.20 um 09:05 schrieb Per Jessen:
Daniel Bauer wrote:
Yes, I have firewalld running, I know since 5 minutes :-) I stopped it, and - trara! - it (kind of) works.
So now I have two questions:
- can I open port 80 in firewalld settings (I guess I'll find them somewhere in Yast) without the risk to compromise my computer or the files that are within the local apache directory htdocs...?
Yep. By opening port 80 on that machine, your apache webserver becomes available to your local network only.
Ok, I opened that port, and in fact I can reach the server when the phone is on my wifi-net, but not when it's on the phone-net. Good.
Nice test.
When it doesn't show any images, what do you see instead - a placeholder or just nothing? The former would mean the image wasn't found, if you see nothing at all, something is wrong with the HTML.
I see the "missing image" icon. Styles are not applied, the font is not used, background colors and images do not appear. (Inline styles are applied - this is only a temporary page and I added some styles directly to the lines - but styles from the css-file not)
Okay, so those linked files are not being found.
If you look in the apache logs, you will see 404s for the files that were not found.
This is the log from the very last try. As much as I see all parts were loaded correctly. Still styles are not applied and image not shown on the mobile.
According to the log, as you say, all is being fetched correctly. Weird.
On my local computer the path is /srv/www/htdocs/Entwicklung/project within the php-file pathes are relative it works on the same computer, but not on the phone (but it works on the phone when calling it from the online-internet-server)
"it works on the same computer" ? so when you browse it locally, which address do you use? localhost or 192.168.x.x ? Try it from the local computer, but with 192.168.x.x - that ought to produce the same result as on your phone.
It works on the same computer with 192... https://www.daniel-bauer.com/div/Screenshot_20200321_094033.png
So ... although the images and the css file are fetched by your mobile, they are not shown. It might be interesting to "click" on the missing image on the phone and say "display only image". You would then get to see the URL, maybe to spot the problem ? When the phone has fetched the files, I cannot think of any reason why it would not display them.
Maybe then view the source (ctrl-u) and paste it somewhere for us to see. Or send it to me.
It's not a big secret :-) https://www.daniel-bauer.com/div/index2.html.txt
Hmm, I see no problems there. -- Per Jessen, Zürich (12.2°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Am 21.03.20 um 10:59 schrieb Per Jessen:
So ... although the images and the css file are fetched by your mobile, they are not shown. It might be interesting to "click" on the missing image on the phone and say "display only image". You would then get to see the URL, maybe to spot the problem ?
When the phone has fetched the files, I cannot think of any reason why it would not display them.
It is extremely strange. I tried on another phone with firefox and (enabled only for this test) with big brother chrome. With the same results. Now I tried to just open an image. I copied it to the folder where the index-file is. The server says 192.168.1.34 - - [21/Mar/2020:11:34:44 +0100] "GET /Entwicklung/karls/logo_small.png HTTP/1.1" 200 4002 "-" "Mozilla/5.0 (Linux; Android 8.1.0; DRA-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Mobile Safari/537.36" so, that seems to be ok. But chrome says: This page isn't working 192.168.1.38 unexpectedly closed the connection ERR_CONTENT_LENGTH_MISMATCH (there is nothing related in apache2 error.log) I can load that image in the browser via IP or localhost from the local computer on which apache runs. -- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
I'll open a new thread on this... Am 21.03.20 um 11:45 schrieb Daniel Bauer:
Am 21.03.20 um 10:59 schrieb Per Jessen:
So ... although the images and the css file are fetched by your mobile, they are not shown. It might be interesting to "click" on the missing image on the phone and say "display only image". You would then get to see the URL, maybe to spot the problem ?
When the phone has fetched the files, I cannot think of any reason why it would not display them.
It is extremely strange. I tried on another phone with firefox and (enabled only for this test) with big brother chrome. With the same results.
Now I tried to just open an image. I copied it to the folder where the index-file is.
The server says
192.168.1.34 - - [21/Mar/2020:11:34:44 +0100] "GET /Entwicklung/karls/logo_small.png HTTP/1.1" 200 4002 "-" "Mozilla/5.0 (Linux; Android 8.1.0; DRA-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Mobile Safari/537.36"
so, that seems to be ok.
But chrome says:
This page isn't working 192.168.1.38 unexpectedly closed the connection ERR_CONTENT_LENGTH_MISMATCH
(there is nothing related in apache2 error.log)
I can load that image in the browser via IP or localhost from the local computer on which apache runs.
-- Daniel Bauer photographer Basel Málaga https://www.patreon.com/danielbauer https://www.daniel-bauer.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
* Per Jessen <per@computer.org> [03-21-20 06:02]:
Daniel Bauer wrote:
Am 21.03.20 um 09:05 schrieb Per Jessen:
Daniel Bauer wrote:
Yes, I have firewalld running, I know since 5 minutes :-) I stopped it, and - trara! - it (kind of) works.
So now I have two questions:
- can I open port 80 in firewalld settings (I guess I'll find them somewhere in Yast) without the risk to compromise my computer or the files that are within the local apache directory htdocs...?
Yep. By opening port 80 on that machine, your apache webserver becomes available to your local network only.
Ok, I opened that port, and in fact I can reach the server when the phone is on my wifi-net, but not when it's on the phone-net. Good.
Nice test.
When it doesn't show any images, what do you see instead - a placeholder or just nothing? The former would mean the image wasn't found, if you see nothing at all, something is wrong with the HTML.
I see the "missing image" icon. Styles are not applied, the font is not used, background colors and images do not appear. (Inline styles are applied - this is only a temporary page and I added some styles directly to the lines - but styles from the css-file not)
Okay, so those linked files are not being found.
is "follow links" allowed for the location in your apache/http config? -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 18:52:22 +0100 Daniel Bauer <linux@daniel-bauer.com> wrote:
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a different network to 192.168.1.x That was exactly my point. You certainly need to give us the first three octets, and there's no reason not to give us the fourth.
I can, for example, use the App SSHelper and rsync from my phone to the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that I could open my local server to the world...
In earlier projects I uploaded the files to the online-web-server in a htaccess protected folder, but it would be much more comfortable if I could simply see how my CSS magic works using the local server...
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Dave Howorth wrote:
On Fri, 20 Mar 2020 18:52:22 +0100 Daniel Bauer <linux@daniel-bauer.com> wrote:
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
Daniel Bauer wrote:
Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a different network to 192.168.1.x That was exactly my point.
<nitpick> On 192.168.0.0/16, they are on the same network. </nitpick> For solving Daniel's issue, it is sufficient to know we're dealing with some 192.168.x.x network behind his router. -- Per Jessen, Zürich (13.3°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 20 Mar 2020 19:49:04 +0100 Per Jessen <per@computer.org> wrote:
Dave Howorth wrote:
On Fri, 20 Mar 2020 18:52:22 +0100 Daniel Bauer <linux@daniel-bauer.com> wrote:
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
> Daniel Bauer wrote: > Must say, that, in case that I have a firewall, it is what came with the default install of OS 15.1. Also apache is a default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a different network to 192.168.1.x That was exactly my point.
<nitpick> On 192.168.0.0/16, they are on the same network. </nitpick>
I don't think it's likely that somebody who was able to configure that non-standard arrangement would be asking the questions Daniel is.
For solving Daniel's issue, it is sufficient to know we're dealing with some 192.168.x.x network behind his router.
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Dave Howorth wrote:
On Fri, 20 Mar 2020 19:49:04 +0100 Per Jessen <per@computer.org> wrote:
Dave Howorth wrote:
On Fri, 20 Mar 2020 18:52:22 +0100 Daniel Bauer <linux@daniel-bauer.com> wrote:
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
Daniel Bauer wrote:
>> Daniel Bauer wrote: >> > Must say, that, in case that I have a firewall, it is what > came with the default install of OS 15.1. Also apache is a > default install via Yast.
I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a different network to 192.168.1.x That was exactly my point.
<nitpick> On 192.168.0.0/16, they are on the same network. </nitpick>
I don't think it's likely that somebody who was able to configure that non-standard arrangement would be asking the questions Daniel is.
I guess at most "atypical" , but not non-standard :-) Otherwise I agree, it was just your claim that 192.168.1.x and 192.168.2.x were separate networks I found a little too strong.
For solving Daniel's issue, it is sufficient to know we're dealing with some 192.168.x.x network behind his router.
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them.
one for wifi, one for wired ? Well, it seems Daniel's router doesn't do that. -- Per Jessen, Zürich (11.1°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <per@computer.org> wrote:
Dave Howorth wrote:
On Fri, 20 Mar 2020 19:49:04 +0100 Per Jessen <per@computer.org> wrote:
Dave Howorth wrote:
On Fri, 20 Mar 2020 18:52:22 +0100 Daniel Bauer <linux@daniel-bauer.com> wrote:
Am 20.03.20 um 18:25 schrieb Dave Howorth:
On Fri, 20 Mar 2020 17:07:17 +0100 Per Jessen <per@computer.org> wrote:
> Daniel Bauer wrote: > >>> Daniel Bauer wrote: >>> >> Must say, that, in case that I have a firewall, it is what >> came with the default install of OS 15.1. Also apache is a >> default install via Yast. > > I expect the firewall is your problem.
Well, it might be, but Daniel hasn't told us how his phone is connected to the Internet yet. Maybe it's not on the local wifi network, or maybe it's on a guest network provided by the router, as the phones in my house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP addresses (unless the mysterious 'IP' in his original mail is a public address).
The computer and the phone are connected to the same router, both have addresses 192.168.x.x.
Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a different network to 192.168.1.x That was exactly my point.
<nitpick> On 192.168.0.0/16, they are on the same network. </nitpick>
I don't think it's likely that somebody who was able to configure that non-standard arrangement would be asking the questions Daniel is.
I guess at most "atypical" , but not non-standard :-)
OK, non-default. :P
Otherwise I agree, it was just your claim that 192.168.1.x and 192.168.2.x were separate networks I found a little too strong.
For solving Daniel's issue, it is sufficient to know we're dealing with some 192.168.x.x network behind his router.
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them.
one for wifi, one for wired ?
No, one main network and one guest network, with different access profiles. Devices on the guest network can't see the main network, so it's a good place to put many IOT devices. Much like a DMZ. Maybe it's just a Fritz!Box feature?
Well, it seems Daniel's router doesn't do that.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-ID: <alpine.LSU.2.21.2003211339350.10293@Legolas.valinor> El 2020-03-21 a las 11:23 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <> wrote:
...
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them.
one for wifi, one for wired ?
No, one main network and one guest network, with different access profiles. Devices on the guest network can't see the main network, so it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?
Well, it seems Daniel's router doesn't do that.
My router, suplied by the ISP (Telefonica) doesn't have that feature. I have a different SSID and password, but there is no separate VLAN or segment for it, which is a pain. And Daniel is using the same ISP as me, although I suspect his router is quite newer than mine. - -- Cheers Carlos E. R. (from openSUSE 15.1 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXnYLVBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV4iYAoIybm4f/8cx25Zxd5STy l/wNpo0NAJ4njvCgAaarCEWhL2ezJ9C//y4VYg== =wUZf -----END PGP SIGNATURE-----
On Sat, 21 Mar 2020 13:40:52 +0100 (CET) "Carlos E. R." <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Content-ID: <alpine.LSU.2.21.2003211339350.10293@Legolas.valinor>
El 2020-03-21 a las 11:23 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <> wrote:
...
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them.
one for wifi, one for wired ?
No, one main network and one guest network, with different access profiles. Devices on the guest network can't see the main network, so it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?
Well, it seems Daniel's router doesn't do that.
My router, suplied by the ISP (Telefonica) doesn't have that feature. I have a different SSID and password, but there is no separate VLAN or segment for it, which is a pain. And Daniel is using the same ISP as me, although I suspect his router is quite newer than mine.
I don't understand. What's the purpose of a different SSID and password if it gives access to the same network? Is the manual for that router available online? (in English :)
- -- Cheers Carlos E. R.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
* Dave Howorth <dave@howorth.org.uk> [03-21-20 10:49]:
On Sat, 21 Mar 2020 13:40:52 +0100 (CET) "Carlos E. R." <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Content-ID: <alpine.LSU.2.21.2003211339350.10293@Legolas.valinor>
El 2020-03-21 a las 11:23 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <> wrote:
...
No, that's entirely my point. Some routers, such as mine have TWO different 192.168.*.* networks behind them.
one for wifi, one for wired ?
No, one main network and one guest network, with different access profiles. Devices on the guest network can't see the main network, so it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?
Well, it seems Daniel's router doesn't do that.
My router, suplied by the ISP (Telefonica) doesn't have that feature. I have a different SSID and password, but there is no separate VLAN or segment for it, which is a pain. And Daniel is using the same ISP as me, although I suspect his router is quite newer than mine.
I don't understand. What's the purpose of a different SSID and password if it gives access to the same network? Is the manual for that router available online? (in English :)
bad morning, but. Somehow this ended up in the wrong message. You referenced links not being displayed when you accessed a paticular local web page. If the links were not to directories in /srv/www/htdocs/xxx/..., apache2/http requires specific configuration to follow links. I believe it can be accomplished within ".htaccess" files but know it can be enabled with specific configuration in the apache2/http configs. ie: a link from /<some>/<directory>/<file> to /srv/www/thdocs/... apache2/http *must* be configured to follow links or the above will fail. -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2020-03-21 a las 14:45 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 13:40:52 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 11:23 -0000, Dave Howorth escribió: On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <> wrote:
...
Well, it seems Daniel's router doesn't do that.
My router, suplied by the ISP (Telefonica) doesn't have that feature. I have a different SSID and password, but there is no separate VLAN or segment for it, which is a pain. And Daniel is using the same ISP as me, although I suspect his router is quite newer than mine.
I don't understand. What's the purpose of a different SSID and password if it gives access to the same network? Is the manual for that router available online? (in English :)
I agree with you, but someone at Comtrend or Telefónica thought it good or not necessary to pay for the feature of having a separate vlan (the router does uses vlans for the TV and voice services). What is it good for? Maybe to not give the guest your password and change it after he goes. Sigh :-/ Comtrend VG-8050 - I suppose Daniel has a different model, mine has some years. Maybe even different brand. But same provider, so same thinking heads. One site in English (even though the name is in Spanish): <https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050> - -- Cheers Carlos E. R. (from openSUSE 15.1 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXnZwsxwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV47sAnRWqp8wnFYVY+TCkGx3J zLv0ikNRAJ4ze9OIW+KHqwTjUD0p+xECL3JtMA== =9+RK -----END PGP SIGNATURE-----
On Sat, 21 Mar 2020 20:53:23 +0100 (CET) "Carlos E. R." <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
El 2020-03-21 a las 14:45 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 13:40:52 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 11:23 -0000, Dave Howorth escribió: On Sat, 21 Mar 2020 09:10:18 +0100 Per Jessen <> wrote:
...
Well, it seems Daniel's router doesn't do that.
My router, suplied by the ISP (Telefonica) doesn't have that feature. I have a different SSID and password, but there is no separate VLAN or segment for it, which is a pain. And Daniel is using the same ISP as me, although I suspect his router is quite newer than mine.
I don't understand. What's the purpose of a different SSID and password if it gives access to the same network? Is the manual for that router available online? (in English :)
I agree with you, but someone at Comtrend or Telefónica thought it good or not necessary to pay for the feature of having a separate vlan (the router does uses vlans for the TV and voice services).
What is it good for? Maybe to not give the guest your password and change it after he goes. Sigh :-/
Comtrend VG-8050 - I suppose Daniel has a different model, mine has some years. Maybe even different brand. But same provider, so same thinking heads.
One site in English (even though the name is in Spanish): <https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>
Ah thanks, but that site seems to want me to sign up to it to be able to read the document.
- -- Cheers Carlos E. R.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2020-03-21 a las 20:24 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 20:53:23 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 14:45 -0000, Dave Howorth escribió:
...
Comtrend VG-8050 - I suppose Daniel has a different model, mine has some years. Maybe even different brand. But same provider, so same thinking heads.
One site in English (even though the name is in Spanish): <https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>
Ah thanks, but that site seems to want me to sign up to it to be able to read the document.
I just exited the prompt and it appeared to let me read, but I did not try browse to the end. You can instead just google "Comtrend VG-8050" and find another site, some have the original which is in English, not Spanish. I don't have now access to my desktop machine which has a copy; I'm migrating it. - -- Cheers Carlos E. R. (from openSUSE 15.1 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXnaDIBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV1QYAnR26jr7Y2908OqtbYdf0 MMUdZQZ1AJ9jxkgVra8GbmtG0B97iAfHlqH9ug== =F7qA -----END PGP SIGNATURE-----
On Sat, 21 Mar 2020 22:12:00 +0100 (CET) "Carlos E. R." <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
El 2020-03-21 a las 20:24 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 20:53:23 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 14:45 -0000, Dave Howorth escribió:
...
Comtrend VG-8050 - I suppose Daniel has a different model, mine has some years. Maybe even different brand. But same provider, so same thinking heads.
One site in English (even though the name is in Spanish): <https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>
Ah thanks, but that site seems to want me to sign up to it to be able to read the document.
I just exited the prompt and it appeared to let me read, but I did not try browse to the end. You can instead just google "Comtrend VG-8050" and find another site, some have the original which is in English, not Spanish.
OK. This link has an English manual: http://www.movistar.es/rpmm/estaticos/residencial/fijo/banda-ancha-adsl/manu... I don't see any mention of more than one WLAN though??
I don't have now access to my desktop machine which has a copy; I'm migrating it.
- -- Cheers Carlos E. R.
(from openSUSE 15.1 (Legolas))
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2020-03-21 a las 23:15 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 22:12:00 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 20:24 -0000, Dave Howorth escribió:
On Sat, 21 Mar 2020 20:53:23 +0100 (CET) "Carlos E. R." <> wrote:
El 2020-03-21 a las 14:45 -0000, Dave Howorth escribió:
...
Comtrend VG-8050 - I suppose Daniel has a different model, mine has some years. Maybe even different brand. But same provider, so same thinking heads.
...
OK. This link has an English manual: http://www.movistar.es/rpmm/estaticos/residencial/fijo/banda-ancha-adsl/manu...
I don't see any mention of more than one WLAN though??
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything. - -- Cheers Carlos E. R. (from openSUSE 15.1 (Legolas)) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXnay4Bwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVByQAn3Ls/1OPs3yRGc0A5INW NKOCjfnkAKCL9cBGO8lacNIQ0ct1Zt/9G+LteQ== =30bu -----END PGP SIGNATURE-----
Carlos E. R. wrote:
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything.
I think I would consider vlans to be out of scope for most SOHO equipment and "staff" ? Dave, if your Fritz!box has multiple SSIDs, I would also expect it to support VLANs ? Two of our access points are TP-Link TL WA901 and WA801 - they both support 4 SSIDs with VLANs. We have assigned a separate VLAN for the guest SSID. -- Per Jessen, Zürich (2.9°C) http://www.cloudsuisse.com/ - your owncloud, hosted in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Sun, 22 Mar 2020 09:55:07 +0100 Per Jessen <per@computer.org> wrote:
Carlos E. R. wrote:
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything.
I think I would consider vlans to be out of scope for most SOHO equipment and "staff" ?
Dave, if your Fritz!box has multiple SSIDs, I would also expect it to support VLANs ?
Two of our access points are TP-Link TL WA901 and WA801 - they both support 4 SSIDs with VLANs. We have assigned a separate VLAN for the guest SSID.
I don't know. I've never used a VLAN to my knowledge (actually, that's not true - I think my last place of employment used VLANs to manage everything, but it was transparent to users) and don't really understand them. Nor do I understand WLANs very well - specifically how they create more than one SSID. Anyway the word VLAN doesn't appear on this page: https://en.avm.de/products/fritzbox/fritzbox-7530/technical-data/ nor in the 284-page manual, so I suspect not. It simply presents two SSIDS on different 192.168.x subnets. One is part of the same network as the wired Ethernet ports, and the other 'guest' isn't. Typically devices on the guest network can access the wider Internet, but can't see the local network. It's possible to tweak the access permissions of everything. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 22/03/2020 09.55, Per Jessen wrote:
Carlos E. R. wrote:
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything.
I think I would consider vlans to be out of scope for most SOHO equipment and "staff" ?
Dave, if your Fritz!box has multiple SSIDs, I would also expect it to support VLANs ?
Two of our access points are TP-Link TL WA901 and WA801 - they both support 4 SSIDs with VLANs. We have assigned a separate VLAN for the guest SSID.
My ISP router supports at least some kind of VLAN (I have not looked in detail) because they (the ISP) needs the feature. They create (I think) a separate network for the cable (fibre) TV service, and another for the VoIP service. But they don't document this, which makes difficult to use your own router. However the feature that it doesn't have is automatic creation of either a VLAN or a subnet assigned to the Guest wifi network. I have not investigated if I can manually create an VLAN for it. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On 2020-03-22 04:55 AM, Per Jessen wrote:
Two of our access points are TP-Link TL WA901 and WA801 - they both support 4 SSIDs with VLANs. We have assigned a separate VLAN for the guest SSID.
As I mentioned in another note, routers might provide only guest SSIDs, which only allow access to the Internet. Access points can use VLANs to connect as needed to the network. BTW, I also have a TP-Link WA-901N AP. It has a bug in it which allows multicasts to leak from the main LAN to the VLAN. This makes it impossible for me to use another SSID, as the IPv6 router advertisements leak from the LAN to the guest VLAN, which results in the devices getting addresses in the wrong network. Mine is version 2 and I don't know if that has been fixed in later versions. When I called their support, the first level insisted that was normal. However, 2nd level agreed it was a problem, but there was no fix forthcoming. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2020-03-21 08:35 PM, Carlos E. R. wrote:
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything.
Some WiFi routers have a guest WiFi, which connects guests only to the Internet. A proper AP will support VLANs for the different SSIDs. The VLANs can then be used to connect the other SSIDs as needed -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 22/03/2020 14.38, James Knott wrote:
On 2020-03-21 08:35 PM, Carlos E. R. wrote:
I have not read it recently, but when I define a guest wifi access I can only enter ssid and password, nothing about defining an vlan or segment. And it ends in the same segment as everything, with access to everything.
Some WiFi routers have a guest WiFi, which connects guests only to the Internet.
I know. But mine has 4 guest wifis, and all of them connect to the main internal network. <https://susepaste.org/12205271>
A proper AP will support VLANs for the different SSIDs. The VLANs can then be used to connect the other SSIDs as needed
As you can see, the wifi setup can not associate the guest to an vlan. See security tab, some more options but not that one: <https://susepaste.org/83223245> I have a separate AP upstairs (Asus RT-N12D1), but I need the guest access downstairs. This one has a proper guest configuration with restricted lan access, it says. I have to try it. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On 2020-03-22 10:31 AM, Carlos E. R. wrote:
Some WiFi routers have a guest WiFi, which connects guests only to the Internet.
I know.
But mine has 4 guest wifis, and all of them connect to the main internal network.
That's dumb. What's the purpose of multiple SSIDs then? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 22/03/2020 15.45, James Knott wrote:
On 2020-03-22 10:31 AM, Carlos E. R. wrote:
Some WiFi routers have a guest WiFi, which connects guests only to the Internet.
I know.
But mine has 4 guest wifis, and all of them connect to the main internal network.
That's dumb. What's the purpose of multiple SSIDs then?
Not giving the password to a guest, I guess. You can deactivate it with a click after the guest leaves, enter a new password next time. Dumb, yes. Absolutely. Broadband doesn't make the best routers... :-/ -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On 2020-03-22 10:54 AM, Carlos E. R. wrote:
Dumb, yes. Absolutely.
You seem to get a lot of that in Spain. ;-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 22/03/2020 16.04, James Knott wrote:
On 2020-03-22 10:54 AM, Carlos E. R. wrote:
Dumb, yes. Absolutely.
You seem to get a lot of that in Spain. ;-)
The router was not made nor designed in Spain... The manual is in English, not in Spanish. The Spanish manual is a short version. Other samples of dumb routers have been posted in this thread. Or dumb support refusing to correct dumb bugs. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
Dne neděle 22. března 2020 16:23:00 CET, Carlos E. R. napsal(a):
Other samples of dumb routers have been posted in this thread. Or dumb support refusing to correct dumb bugs.
That's why one should buy something like https://www.turris.cz/en/ :-) The only problem is that it isn't the cheapest product. :-( But as shown here, getting crap for nearly no money isn't victory at all... -- Vojtěch Zeisek https://trapa.cz/ Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/
On 22/03/2020 16.34, Vojtěch Zeisek wrote:
Dne neděle 22. března 2020 16:23:00 CET, Carlos E. R. napsal(a):
Other samples of dumb routers have been posted in this thread. Or dumb support refusing to correct dumb bugs.
That's why one should buy something like https://www.turris.cz/en/ :-) The only problem is that it isn't the cheapest product. :-( But as shown here, getting crap for nearly no money isn't victory at all...
Well, then I would have the next problem: configure a good router with a non documented setup. I would have to reverse engineer the configuration of the current router, and of course, support on my own future ISP network changes (they would be applied remotely and automatically to their router, but not to mine). There are two vlans, one for the TV service and another for transparent VoIP, and who knows what more hidden there. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
participants (7)
-
Carlos E. R. -
Daniel Bauer -
Dave Howorth -
James Knott -
Patrick Shanahan -
Per Jessen -
Vojtěch Zeisek