In the last days, I worked to backport to 6.8 a useful feature introduced in NethServer 7: access to CGP graphs and Lightsquid reports through the standard server-manager port (980).
Now, I’ve uploaded three updated packages to the nethserver-testing repository and I’d like to widen the test base.
If you’d like to help testing, these are the commands:
Some concerns against security, even if nethserver-cgp is not the most vulnerable module. I can see that there is no password, nor authentication, of course if I’m wrong, please shout.
For what I can see it is just a random URL who is used to do a reverse proxy in the server-manager
The idea behind the long hash url to access read-only reports it’s similar to the google docs share with a link: only who has the link can read the reports (usually the boss).
By default, port 980 is only accessible from lan/green.
All server-manager pages are password protected except these two read-only reports which also are anonymized: I can’t see a big security hole.
I’d prefer not to change things on the interface, but we could announce in advance that 6.9 will move reports behind a password access (i.e.fully backport 7 code).
Hello guys, can anyone tell me why the hash of the lightsquid eg: 064f728c3c47ad6d911cd915673a08a95dd715cb is the same for all firewall installations? That is, if I install 1000 firewalls this key will always be the same. Should not it be at least one for each firewall? How can I change it?
