Skip to main content
A
Anonymous
April 17, 2011
Question

fms allows any connection from fmle regardless of allowedSWF or allowedHTML

  • April 17, 2011
  • 1 reply
  • 859 views

I have been trying to block incoming connections with fms 4 ent for the live application.

I set allowedSWFdomains.txt and allowedHTMLdomains.txt to  x.com so that I block every domain.

I don't want any connection to come in and setting the domain to x.com blocks everything when I try

to load. Except using FMLE it allows this no matter what you set in the allowedSWF or allowedHTML

what kind of security is this. Does that mean anyone with FMLE can connect to anyones server.

How do I actually block connections?

    This topic has been closed for replies.

    1 reply

    S
    SE_0208
    Participating Frequently
    April 18, 2011

    You can use FMLE Authentication Add-in to allow only users who have valid username/password to connect to your applications.

    A
    Anonymous
    April 18, 2011

    That is not an acceptable solution we don't want them to have a user and pass. If you look at Influxis mobile streaming they

    turn off fmle after bandwidth is reached.

    This ties into another question I have posted here. I am trying to disable account after bandwidth limit is reached.

    Shutting down their application doesn't work it will restart when they connect. Changing the allowedHTML is working

    because when just putting x.com blocks everything but fmle.

    I guess I could just rename the application folder something like folder.off or something like that but I have made an

    all automated system and find out that no way to easily turn off each users application. And shutting down the vhost

    isn't an option as it will have the other clients on there.

    S
    SE_0208
    Participating Frequently
    April 19, 2011

    I suppose you are using "live" application or app which is based on "live" application code. If you see "live" application code , it does not do authentication for FMLE using allowedSWF and allowedHTML. (this two were based to autheticate clients who can connect to particular from hosted domains & FMLE is not hosted and also publishing is supposed to be in controlled environment). Having said that - you can always modify the server code - but you will need FMIS for it - Streaming Edition won't allow modification of server-side code.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices