Web UI port

The Web UI server port is not configurable by the administrator.

Regards,

aastra4

1. Exposing the UI of your phone or PBX to the web is for lack of a better term STUPID.
see: http://www.google.com/search?q="hacked"+site:trixbox.org
2. http://en.wikipedia.org/wiki/Port_forwarding

If you have ssh login, then you can create an ssh tunnel and access the web UI locally.
You can do something like this

ssh -L ::80 user@remotehost

then in your browser, go to
http://localhost:

and you will have access to your phone UI

If you are using Putty, look under Tunnels to create something similar.

HTH

For the record we did accomplish the change you are eluding to above to the port the web admin user interface listens on not in the software but by setting up a "virtual server" rule in the firewall to bind our new TB web admin listening port (undisclosed) to port 80 on the internal TB IP AND by shutting off port 80 responses on the firewall. You can always set a remote access port on the firewall with whatever port you want and then log into it and deactivate the virtual server rule by a simple check mark when you don't need access to it and then remote in and check it again before accessing the TB remotely when you do need remote access. You can and should also consider changing the port 22 default Putty uses to connect to the TB. Why secure every other connection and not that one?

This is NOT the same as port forwarding which is useless since it would redirect hacker attacks the same as it would your valid attempts to access the admin interface...

You mentioned other systems in the network having traffic on those other ports so if you can put the TB on the same firewall with the other computers you can use the virtual server rules to route the port 80 traffic and the port 443 traffic to other internal IPs of the respective servers behind the same firewall or even remap them so they are more secure the same as you remap XXXX to 80 on the TB internal IP. If you cannot put them all behind the same firewall then get a public IP for the TB firewall alone, use a switch if necessary in front of your firewall to "split" your internet connection if it is DSL, cable, whatever and then use that dedicated firewall for the virtual server rule to remap port XXXX to port 80 on the TB internal, non public IP of 192.168.X.X

You might also consider (depending on budget) the use of an appliance such as a Raritan KVM over IP solution which would negate the need to leave anything open to the public web ever.... I picked an 8 port unit up on Ebay for $350 and the special KVM cable for it for $25 and considered myself lucky.... just an idea depending on how important maximum security is to you never mind the added ability to remotely resolve problems with the TB even if it locks up and you can't access it through the web or putty interfaces....

Marc

Domains to jump start your online business or to enhance your existing web presence. Flexible funding for domain purchase"Domains
premium business domains,premium domains,generic domains,keyword domains,advertising domains,automobile domains to get online.