Skip to main content
A
Anonymous
January 6, 2009
Question

FMS Limit Domain Access??

  • January 6, 2009
  • 1 reply
  • 1302 views
How do you limit access to FMS app instances from a certain domain? For example, if I only want example.com/file.swf to create an app instance and run - but if I try localhost/file.swf or otherdomain.com/file.swf it will not? Thank you.
    This topic has been closed for replies.

    1 reply

    A
    Anonymous
    January 6, 2009
    parse client.referrer & client.pageUrl properties of each incoming rtmp client connection to know the domain where swf is hosted & where it is embedded. A good use would be to accept or reject clients right in application.onConnect
    A
    Anonymous
    January 6, 2009
    Okay, thanks. - So it is basically a per app thing. It is nothing you configure on the server or in the files in the FMS directory, correct?
    T
    turbidity
    Known Participant
    February 3, 2009
    Check out this file here: http://www.adobe.com/products/flashmediaserver/pdfs/FlashMediaServer3_WhitePaper_ue_v1.pdf. I don't know if you can limit on an application instance level, but you can set on the server level.

    Here's the relevant block from the PDF, on page 50:
    quote:
    Restrict access from domains By default, a client can connect to Flash Media Server from any domain or IP address, which can be a security risk. You can create a whitelist of allowed domains (or a blacklist of banned domains) to ensure that only authorized clients can connect to your applications or services. You can add a comma-delimited list of domains and/or IP-address blocks in the Adaptor.xml or vHost.xml configuration files to add this level of security. This is usually the first step in locking down your server; it prevents malicious or unauthorized domains from freely accessing your applications and streams.
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices