- This topic has 1 reply, 1 voice, and was last updated 16 years, 9 months ago by
.
-
Posts
-
Hello All:
I’ve set up a MacMini Server in my house and ran into a pretty severe problem with rather un-secure AFP access being allowed.
MacMini Server – 4GB ram & 1TB storage, running 10.6.2 Server
Apple USB Ethernet Adapter
Static IP Address linked to the USB Adapter – plugged into the Cable Modem
192.x address on the inside (Gateway Assistant ROCKS) Plugged into my GB Switch
NAT, AFP, DNS & DHCP are running great.
VPN configured and works great.
AFP turned on and can connect to sharepoints from outside just fine with a VPN connection.HOWEVER…AFP is also allowing access via my static IP address completely bypassing the VPN!
Forgive me if there is a simple solution, but I can’t figure out how to block AFP access from my Static IP address only?
TIA for a solution….Please keep it simple!
Found my own answer…figured I’d post it should the question come up for someone else…
Turn off allow AFP in ONE Firewall Setting….
Server Admin – Firewall – Services – Edit Settings for: pull down to Any…make sure Apple File Service (AFP) is not checked. Then from the other options in the pull down (IE: 192.168-net & 192.168.1-net & VPN-Net…in my instance) make sure AFP is checked….now no one can have AFP access to my server via the static public IP address, internal and VPN access only is allowed.
- You must be logged in to reply to this topic.