Hsphere listen on ports other than the default port?

[tnguyen]

Is it at possible to configure Hsphere to listen to ports other than the default 8080 such as 80?

Thanks,
Tom

[dynamicnet]

Greetings Tom:

http://www.psoft.net/HSdocumentation/sysadmin/ssl.html gives cluses as to how to use other ports.

Though what's wrong with 8080 and 8443?

Thank you.

[tnguyen]

Greetings Tom:

http://www.psoft.net/HSdocumentation/sysadmin/ssl.html gives cluses as to how to use other ports.

Though what's wrong with 8080 and 8443?

Thank you.

Hi dynamicnet,

The reason I asked because there're users behind strict firewalls that only have standard ports opened and not allowing anything else so I thought it may be a problem for these users.

Tom

[dynamicnet]

Hi Tom:

We've worked with such companies before; and if you are patient, and can talk with the right people, they will open up the necessary ports.

Thank you.

[tnguyen]

dynamicnet,

What would you suggest? Try convicing those people to open the ports first, if this doesn't work out then change the ports in the configuration file according to the documentation?

Best regards,
Tom

[dynamicnet]

Hi Tom:

I would recommend letting them know that the ports you use are common for automated systems; and that using them poses no additional security risk.

I would let them know this is what your system requires.

Thank you.

P.S. If they have the fire wall admin on staff, it is only a few minutes (if that) to open up the port(s).

Thank you.

[ladylinux]

Hello,

if they have the fire wall admin on staff, it is only a few minutes

They could hedge about tcp 8080 .. which is a ISA server proxy port .. Lots of scans on that one ..

Lady Linux

[dynamicnet]

Greetings LL:

They would only have to open 8080 and 8443 outbound.

Thank you.

[dorijan]

We have put up a small apache 2.0 with mod_proxy in front of our H-Sphere System. That way we can very easily use any Port we like w/o doing changes to the H-Sphere backend System.

[tnguyen]

Hi jorijan,

Did you put the mod_proxy on a different machine or on the same machine H-sphere?

Thanks,
Tom

[dorijan]

im using a virtuozzo server to create frontends like this.

they dont need super hardware and the 100% backup function of virtuozzo is just great.

[ladylinux]

They would only have to open 8080 and 8443 outbound.


If The server is behind a firewall that would be inbound ..

Lady Linux

[meridien]

It is not terribly difficult to modify the hsphere cp to listen on 80/443, but it will require a dedicated IP on the cp box. You will need to change all instances of 8443/8080 to 443/80 respectively in the hsphere.properties file, and then change the cp's httpd.conf to listen on xxx.xxx.xxx.xxx:80 and xxx.xxx.xxx.xxx:443. I have not made this change with v2.4.x, but it should behave the same as v2.3.x in that regard. The changes to httpd.conf are standard and so are not version-specific.

[tnguyen]

I think it's easier for to change the settings in hsphere.properties file than trying to convince those firewall admins. I don't mind dealing with them but it would take more time.

Thanks for all the tips everyone.

Regards,
Tom

[dynamicnet]

Greetings Tom:

There is an old saying that does fit some of the time -- "whatever works."

Take care.

[Dig]

Also, one more thing port 80 will be open to all domains in the CP and not for specific reseller or client. so think before you change it.

[bluerocket]

Also, one more thing port 80 will be open to all domains in the CP and not for specific reseller or client. so think before you change it.

Hi dig, I was thinking about implementing this change but what do you mean about open to all domains in the CP???

Is this a security issue?