Plugin: Web User Interface for SageTV 2.2-6.6 (V2.25 18 Sep 2009)

[VCRUser]

I love the webserver, and mostly use it to manage conversions, anc checking/creating recordings remotely. I was, however, experimenting with streaming videos via the webserver, and can't get it to work. "Stream original video" over the LAN works fine, opening up VLC when I click on "pls." When I try to use the stream transcoded video links, however, VLC comes up, but can't seem to connect. I've tried various transcode formats, but nothing works.

[jreichen]

v 2.26 snapshot 47 has the following changes:

• Video conversions now allows entry of a new folder and filename when deleting original recording
• Video conversions now allows entry of start and duration when converting multiple recordings

[ericscottf]

This probably isn't a great place to ask this, but I can't think of a better spot...

This may also be a very *very* stupid question...

I don't want to expose the sage web server directly to the outside world. I've got SSH set up inside my network, and I tunnel into my computer which has squid running on it -- so with all that, I can get into my sage webserver from "inside" my network. I'm paranoid, I like it like that. I know the sage server is probably secure, but humor me for a moment.

I've verified that all i've got open on my router is the ssh port (non standard) pointing at my server. _nothing_else_is_open_

Why and how is it, then, that the port I gave to the sage webserver is open to the outside world? Is it doing some kind of upnp voodoo to open a port in a way i'm unaware of (is this even possible?)
I checked from other accounts not tied to my home in any way, and was easily able to access the sage web server
I checked everywhere in my router config, and i don't see any mention of the port, but upnp is indeed on.

I'm not very familiar with upnp -- i normally set up everything manually. I don't know what it is capable of, or how to see what it has done.

So my question is thus: Does the sage webserver have some kind of magic router-firewall punching ability, and if so, how do i disable it?

thanks!

Edit: I pawed through my router logs and found out that upnp is indeed the culprit here. I'll disable it, hopefully there won't be repercussions as far as java functionality...
Alternately, is there any way to disable upnp attempts by the java webserver?

[Fuzzy]

uPnP does have the capability to set up an open port on the router. That said, i don't know if the sage webserver supports this. What you CAN do is disable uPnP on the router (should be an option in the router config).

[ericscottf]

Yup, i just discovered that by searching my logs for upnp and the port number in question.

Since many routers don't even have upnp (esp. old ones), i'm inclined to think that disabling it won't cause me any grief...

[jreichen]

I don't fully understand what the web server installer (the SageWebserverSetup.exe file) does, but it has a feature to set up UPnP for the webserver's port. I believe it hooks into Sage's UPnP configuration features. Check your Sage properties files for any of these keys:

upnp_port_forward_additional_mappings/WebServer/
placeshifter_port_forward_method

[mkanet]

Hi Ben, I'm not sure if you've ever used TitanTV's EPG for PC based TV recording software; however, one of the most popular features (which I used to even use back in the HiPix HDTV recording days; and, completely miss) was the ability to select a TVshow/movie on the Guide; and, have a a button to send an email reminder to a friends and/or coworkers about a new TV show/series, air date, and a short synopsis of the show; and, if it's a "first run" show.

Would you be motivated to include this feature similar to other EPGs using something like http://www.developerfusion.com/code/1975/sending-email-using-smtp-and-java/?

If the idea sounds appealing to you and others (as it did with people who use TitanTV EPG), we could even take it a step further and add the abililty to add the show as a manual recording/favorite (as an option) buy just clicking on the URL included in the mail sent via the SageTV web interface.

Ultimately... the end user would receive an email saying something like...


--------------------------------------------------------------------------------------
michael@sageTV.dynip.com: Subject: Hi Ben, Someone thought you might enjoy watching the TV show...


Saturday Night Live

Airing: Feb 6, 2010 11:29 PM - 1:02 AM

Description: Host Ashton Kutcher; Them Crooked Vultures perform.

Message: I know how much you a "Them Crooken Vultures" and probably
didnt want to miss this live performance! -Michael

SageTV DVR:
- Add as a Manual Recording (clickable link)
- Add series as a Favorite (clickable link)
--------------------------------------------------------------------------------------

[ericscottf]

Hi all

I've got 3 hd 200s but only two of them show up in the web interface. They're all on. Any reason?

Also, is there any way to name them or are they stuck being named by their mac addresses?

Thanks

[KJake]

Originally Posted by ericscottf

Also, is there any way to name them or are they stuck being named by their mac addresses?

Have a look at C:\Program Files\SageTV\SageTV\webserver\extenders.properties

[ericscottf]

Nice, so that's how i'll name them -- any reason you can think of as to why i'm only seeing two out of three of them?

(i didn't mention that all three are on and working in every other way..)

[joe123]

Is there a way to limit access to the SageTV webserver by ip address?

I was checking my log files and found several attemps at getting through. I will only be using SageTV server from specific ip addresses, so I would like to limit access to the SageTV webserver from a list of IPs.

[ericscottf]

What ip are you hosting it from?
One Q&D fix would be to put it on a unique port, like 43521.
I was getting 1000s of SSH breakin attempts per day on port 22 on my box, so i just moved ssh to something higher, and haven't had a single attempt since.

depending on your router, you could even leave the webserver listening on the default port and just have your router forward the unique external port to the default internal port on the pc.... Just be sure to block the original default.

Your other option would be to set up a tunneling/proxy setup so you have to first tunnel into your network and then get to sage through that.

[joe123]

Originally Posted by ericscottf

What ip are you hosting it from?
One Q&D fix would be to put it on a unique port, like 43521.
I was getting 1000s of SSH breakin attempts per day on port 22 on my box, so i just moved ssh to something higher, and haven't had a single attempt since.

depending on your router, you could even leave the webserver listening on the default port and just have your router forward the unique external port to the default internal port on the pc.... Just be sure to block the original default.

Thanks. I could change the port, but now adays scanning is done automatically and all ports are scanned. So changing it would help, but not prevent.

I was hoping for something simple ( in Linux is easy to setup a host.allow for such things ).

I have NOD32 with firewall, so if there is no other choice in the webserver to do this, i will go with NOD32 to only let certain IP's in.

[ericscottf]

I don't think that people are scanning every IP aggressively. Perhaps businesses or other high profile targets, but not household connections. What's more, with a random port chosen, the protocol is unknown (though further investigation could determine what it is), so it doesn't seem worthwhile to bother.

Like i said, i haven't had a single attempt at an ssh breakin since i moved ports.

I should probably mention that my idea was a Q&D idea, and there's almost certainly a way to restrict based on IPs solely because this is all based on the java webserver, which, while not the most commonly used server, certainly has that feature. I know my RAID card can [dis]allow based on IP, and it uses a java webserver.

[joe123]

Originally Posted by ericscottf

I don't think that people are scanning every IP aggressively.

A quick note about the above line: Trust me on this: There are programs that scan a single port on a single ip and they then move unto the next ip, doing millions of IPs at a time. A db is kept of what is open/closed.

The instrusive program is doing millions of port scans per hour, but to the single indiviual, it looks like a single port scan. With time (months), all ports are scanned.

[Swagger200]

Originally Posted by joe123

Is there a way to limit access to the SageTV webserver by ip address?

I was checking my log files and found several attemps at getting through. I will only be using SageTV server from specific ip addresses, so I would like to limit access to the SageTV webserver from a list of IPs.

I have implemented this source IP restriction, but I did it using my router configuration, not Sage. Works well - Shields Up sees nothing.

[wayner]

I agree with Swagger - this should be done in your router config where you should be able to only access to certain IP addresses.

[jreichen]

Originally Posted by ericscottf

Hi all

I've got 3 hd 200s but only two of them show up in the web interface. They're all on. Any reason?

Also, is there any way to name them or are they stuck being named by their mac addresses?

Thanks

Have they all been connected to your SageTV server? If an HD200 is in the standalone media player mode it won't show up in the web server.

[jreichen]

I uploaded v 2.26 snapshot 48. 'Record' and 'Cancel Record' commands can now be applied to multiple airings at a time. The thought of scheduling Olympics recordings one by one was enough to motivate me to get it done

[banmj]

My MVP's and HD100 are no longer showing up on the webpage, I am using the jetty version, and extender.properies hav been setup a few years now. This worked a few weeks ago, and no changes have been made to the system.