I am currently evaluating unRAID Server 4.1. So far everything is to my satisfaction except one little thing which is the admin web site is widely open. Anyone can going and destroy all the data on the server.

 

One solution which I can live with it to use iptables firewall to block access port 80 from any network interface except loopback. And use SSH port forwarding to access the admin web site via lo. However when I try to configure iptables, I got the following error:

iptables v1.3.8: can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.

 

Then I tried to locate the kernerl-module for unRAID Server 4.1 without success on the Slackware web site. The official current release is 2.6.21.5, and unRAID Server 4.1 is running on 2.6.22.1.

 

The kernerl-module does not need to make into the official release, as long as I can download it and I will be more than happy to buy the license for such great product.

 

Thanks in advance!

This is probably on the MDL, mostly discussed list.

Security is on the next release, so it might be worth waiting for it, before making workaround.

/Rene

The 4.2-beta1 release is out now.  If you enable "User level security" (on the new Users page), then when you access the System Management Utility your browser will prompt you for a user name and password.  Enter 'root' for the user name, and whatever password you defined for root (could be blank).

 

Note: at present, even though you can define many users, only 'root' can log into the SMU.