FMS Limit Domain Access??

3 replies
1313 views
Translate

How do you limit access to FMS app instances from a certain domain? For example, if I only want example.com/file.swf to create an app instance and run - but if I try localhost/file.swf or otherdomain.com/file.swf it will not? Thank you.

This topic is closed to new replies. Start a new post to keep the conversation going.

A

Anonymous

parse client.referrer & client.pageUrl properties of each incoming rtmp client connection to know the domain where swf is hosted & where it is embedded. A good use would be to accept or reject clients right in application.onConnect

Translate

A

Anonymous

Okay, thanks. - So it is basically a per app thing. It is nothing you configure on the server or in the files in the FMS directory, correct?

Translate

T

turbidity

Known Participant

Check out this file here: http://www.adobe.com/products/flashmediaserver/pdfs/FlashMediaServer3_WhitePaper_ue_v1.pdf. I don't know if you can limit on an application instance level, but you can set on the server level.

Here's the relevant block from the PDF, on page 50:

quote:

Restrict access from domains By default, a client can connect to Flash Media Server from any domain or IP address, which can be a security risk. You can create a whitelist of allowed domains (or a blacklist of banned domains) to ensure that only authorized clients can connect to your applications or services. You can add a comma-delimited list of domains and/or IP-address blocks in the Adaptor.xml or vHost.xml configuration files to add this level of security. This is usually the first step in locking down your server; it prevents malicious or unauthorized domains from freely accessing your applications and streams.

Translate

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.