mosquitto icon indicating copy to clipboard operation
mosquitto copied to clipboard

Restrict Access to the client on the Windows server

Open fraelec opened this issue 3 years ago • 1 comments

Hello,

I only want to allow one ip address with the listener. Only when I set listener 25500 172.16.x.x (listener port ip) the brocker does not start. What should I set? What is the right syntax?

Here is the configuration firmware : Mosquitto brocker version installer : mosquitto-2.0.14 Mosquitto Client : Here is the configuration "mosquitto.conf" :

allow_anonymous false listener 25500 172.16.X.X password_file C:\mosquitto\passwd socket_domain ipv4

Thanks for your help

fraelec avatar Jul 01 '22 13:07 fraelec

With the bind address option in the listener config entry you may restrict on which ip address of your server the Mosquitto broker will listen for incoming client connections. If your server is connected to multiple networks you may restrict access to client from one of these network. You may specify an IP-Address or a logical hostname assigned to this ip address. Lets assume your windows server is connected to two networks and has the following IP-Addresses inside these networks: 172.16.0.0/16 with server IP 172.16.1.1 192.168.100.0/24 with Server IP 192.168.100.101

You may configuring a listener, which allows only clients from the 172.16.0.0/16 network to connect to the server by: listener 25500 172.16.1.1

Or you configure a listener, which allows only clients from the 192.168.100.0/24 network to connect to the server by: listener 25500 192.168.100.101

NorbertHeusser avatar Jul 08 '22 10:07 NorbertHeusser