1 - Overview


In this window, you will define the Administration server properties.
630x461 (11901 bytes)


 2 - Options


624x436 (7021 bytes)


Miscellaneous :

Grant all access to localhost : users connecting from localhost can administer the server without providing login and password. By default, this option is disabled for security reasons.

 3 - Log options


To keep track of what your administrators do, you can activate logs.

624x436 (9160 bytes)


Log :

Log enabled : activate, deactivate log.
File path : file name of the log file.
Syntax : define the syntax to use as a template for each log line, you can use Tags.

Log cache :

Cache enabled : activate, deactivate the cache : for high traffic servers, a cache lessen the work on the hard drive by writing only when the cache is full or has expired (there is no reason to disable the cache)
Size limit : every x KBytes, the log will be written (default is 64KB).
Time limit : every x seconds, the log will be written be it full or not (default is 60s).

On a highly loaded server, increasing the Size limit and Time limit will decrease the hard drive usage but it will increase the memory used.

 4 - IP binding


Binding the Administration port to an IP address and port, this window allows you to setup on which IP addresses and port (default is 8021) the administration server will listen.
This can be useful to restrict administration on the local network only, or localhost.

624x436 (7709 bytes)


Click Add (+ button) to add a new IP address:port to listen to, or modify to edit the current entries.

IP/Mask : the IP address to use (can be * for all IP addresses), if you want to bind the administration for local use only use local IP.
Port : the port to listen on, default is 8021.

 5 - IP access


624x436 (7873 bytes)


Restricting IP access is a good way to restrict who can administer the server.
If you know that you will always administer your server from the same IP address, it is a good idea to add it to the IP access list so that only your address can access the administration.



Defining restriction such as IP access permits you to deny or allow access only to users you trust.
You can enter IP addresses and hostnames.

For example :

+*.gene6.net (alone) allows anyone with a domain name from gene6.net to connect, someone not matching this rule will be denied access.

-*.gene6.net (alone) allows everyone to connect except someone from gene6.net.

Notes:


  • You can use *, ?, [x-y] in IP addresses and hostnames : [192-193].16?.[0-10].*, *.net?.nerim.fr
  • To have domain names resolved at runtime (like myftp.dyndns.org) in the access list, enter the address between parenthesis like this : (myftp.dydns.org)
  • CIDR convention is supported : 192.168.0.0/24 (addresses in the range 192.168.0.0 - 192.168.0.255), 12.23.34.128/29 (addresses in the range 12.23.34.128 - 12.23.34.136)