#1 2008-02-13 08:35:22

**_winning_wiin_**

Security issue

We use header-authentication for API-control of AC.
I guess any node on the internet is able to send headers to manipulate the server - if of course the header-auth-password is known; but that can be intercepted.
I would like to limit access to just one host or network - or choose another port than 80 - is this possible?

thanks

**_michael_**

Re: Security issue

You can select whatever port you like for communication.  I believe instructions on how to define port access can be found in the Admin guide.

For limiting access, you could define a rule with your firewall to only allow connections from a particular subnet, for example.