Restrict Network Access to Arylic Web Server

[NWT.Stuff]

@geo George,

I have created a New Topic as this issue will get lost in the New Firmware Topic.

@Geo

It’s kind of a possible misuse vulnerability issue in my case. When anyone who gets to device via IP has playback control.
I have some PCs in local network, can’t isolate them. As for wi-fi devices with app - it’s much easier to isolate them in a guest network.

• there’s a risk of intrusion after all.
  Imagine if someone gets remote access to you network and starts messing with your sound system (((
  Sonos went another way here – they have user accounts in their mobile and desktop app.

@NWT.Stuff

@Geo George,

Depending what Router Make & Model you have it might be possible to restrict access to the Web Server Interface to one or more MAC Addresses (or IP Addresses assuming Fixed IP).

If you post you’re Router Make & Model I will have a look at the Manual to see what’s possible.

Regards

Kevin

@Geo

Thank you, Kevin. I have a Keenetic ULTRA (KN-1810) router there.
First idea that came into my mind in this situation was putting all amps in a separate network subnet segment with restricted access…

[NWT.Stuff]

@Geo

It appears you’re router supports Packet Filtering (A kind of configurable Firewall) which Routes or Stops Ethernet Packets based on some configurable rules. This is configured using the Command Line Interface.

Command-line interface (CLI)

The Command List is found here:-
http://docs.help.keenetic.com/cli/3.1/en/cli_manual_kn-1010_tr.pdf

I would head to Section 3.2 Access. It seems this would be one way of achieving Security without fiddling around with subnets

Hope this helps,

Kevin

[Geo]

Kevin, thank you very much!
I’ll check out those ACL features.