yacy_search_server/htroot/Settings_ServerAccess.inc
luccioman d95b288f19 Removed use of deprecated Jetty IPAccessHandler for client filtering.
Upgraded to InetAccessHandler.
Added InetPathAccessHandler extension to InetAccessHandler to maintain
path patterns capability previously available in IPAccessHandler but
lost in InetAccessHandler.

Filtering on IPv6 addresses is now supported.

Support for deprecated pattern formats such as "192.168." and
"192.168.1.1/path" has been removed, but startup automated migration
should convert such patterns eventually present in serverClient.
2017-12-08 15:12:08 +01:00

69 lines
4.2 KiB
HTML

<form action="SettingsAck_p.html" method="post" enctype="multipart/form-data">
<fieldset><legend id="general">Server Access Settings</legend>
<table border="0" cellspacing="5">
<tr valign="top">
<td>IP-Number filter:</td>
<td><input name="serverfilter" type="text" size="32" maxlength="1000" value="#[serverfilter]#" /><br />(requires restart)</td>
<td><strong>Here you can restrict access to the server.</strong> By default, the access is not limited,
because this function is needed to spawn the p2p index-sharing function.
If you block access to your server (setting anything else than '*'), then you will also be blocked
from using other peers' indexes for search service.
However, blocking access may be correct in enterprise environments where you only want to index your
company's own web pages.<br />
Filter have to be entered as IP, IP range or using CIDR notation separated by comma (e.g. 192.168.1.1,2001:db8::ff00:42:8329,192.168.1.10-192.168.1.20,192.168.1.30-40,192.168.2.0/24)
further details on format see Jetty
<a href="http://download.eclipse.org/jetty/stable-9/apidocs/org/eclipse/jetty/util/InetAddressSet.html" target="_blank">InetAddressSet</a> documentation.
</td>
</tr>
<tr valign="top">
<td>staticIP (optional):</td>
<td><input name="staticIP" type="text" size="32" maxlength="80" value="#[staticIP]#" /></td>
<td><strong>The staticIP can help that your peer can be reached by other peers in case that your
peer is behind a firewall or proxy.</strong> You can create a tunnel through the firewall/proxy
(look out for 'tunneling through https proxy with connect command') and create
an access point for incoming connections.
This access address can be set here (either as IP number or domain name).
If the address of outgoing connections is equal to the address of incoming connections,
you don't need to set anything here, please leave it blank.<br />
ATTENTION: Your current IP is recognized as "#[clientIP]#".
If the value you enter here does not match with this IP,
you will not be able to access the server pages anymore.</td>
</tr>
<tr valign="top">
<td>fileHost:</td>
<td><input name="fileHost" type="text" size="32" maxlength="80" value="#[fileHost]#" /><br />(requires restart)</td>
<td><strong>Set this to avoid error-messages like 'proxy use not allowed / granted' on accessing your Peer by its hostname.</strong>
Virtual host for httpdFileServlet access for example http://FILEHOST/ shall access the file servlet and
return the defaultFile at rootPath either way, http://FILEHOST/ denotes the same as http://localhost:<port>/
for the preconfigured value 'localpeer', the URL is: http://localpeer/.</td>
</tr>
<tr valign="top">
<td colspan="3"><input type="submit" name="serveraccount" class="btn btn-primary" value="Submit" /></td>
</tr>
</table>
</fieldset>
<fieldset><legend id="serverports">Server Port Settings</legend>
<table border="0" cellspacing="5">
<tr valign="top">
<td>Server port:</td>
<td><input name="port" type="text" size="7" maxlength="6" value="#[port]#" /></td>
<td>This is the main port for all http communication (default is 8090). A change requires a restart.</td>
</tr>
<tr valign="top">
<td>Server ssl port:</td>
<td><input name="port.ssl" type="text" size="7" maxlength="6" value="#[server.https_port.ssl]#" /></td>
<td>This is the port to connect via https (default is 8443). A change requires a restart.</td>
</tr>
<tr valign="top">
<td>Shutdown port:</td>
<td><input name="port.shutdown" type="text" size="7" maxlength="6" value="#[port.shutdown]#" /></td>
<td>This is the local port on the loopback address (127.0.0.1 or :1) to listen for a shutdown signal to stop the YaCy server (-1 disables the shutdown port, recommended default is 8005). A change requires a restart.</td>
</tr>
<tr valign="top">
<td colspan="3"><input type="submit" name="serverports" class="btn btn-primary" value="Submit" /></td>
</tr>
</table>
</fieldset>
</form>