Send Motion-user mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/motion-user
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Motion-user digest..."
Today's Topics:
1. Re: Get client ip (Colin Law)
2. Re: Get client ip (Joseph Heenan)
3. security on the webserver port in motion (Richard Bown)
4. Re: security on the webserver port in motion (tosiara)
5. Re: Recorded Video Speed Up/Frame Loss (Stuart Howard)
----------------------------------------------------------------------
Message: 1
Date: Wed, 8 Mar 2017 08:59:10 +0000
From: Colin Law <[email protected]>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <[email protected]>
Message-ID:
<CAL=0glublykv4hyoswr07c_frw7xstimohuh9xdsqb2raq8...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
On 8 March 2017 at 08:42, Adam Goryachev
<[email protected]> wrote:
>
>
> On 8/3/17 19:35, Colin Law wrote:
>> I would have thought it is not necessary to install something like
>> apache to use fail2ban. Stopping brute force attacks is exactly what
>> it is intended to do, so why not use a tool designed to do exactly
>> that?
>>
>> We just need someone with the right knowledge to guide us as to how to do it
>> :)
> First you need to have a log that records the client IP and some words
> to say the login failed. Often this might include the username that was
> used to attempt to login.
> Only after that is done, then fail2ban will be able to monitor the log
> file, and take action as configured...
Ah yes, so logging the same sort of information as in auth.log.
Perhaps even logging to auth.log then using fail2ban would be fairly
simple I think.
Colin
------------------------------
Message: 2
Date: Wed, 8 Mar 2017 08:48:22 +0000
From: Joseph Heenan <[email protected]>
Subject: Re: [Motion-user] Get client ip
To: Motion discussion list <[email protected]>
Message-ID: <[email protected]>
Content-Type: text/plain; charset="us-ascii"
I'd definitely use nginx or apache as a reverse proxy. It's far more flexible,
you get a wider choice of security features, https support, logging
configurations, white/black listing, you can extra pages to allow custom camera
grids, and if appropriately configured means you only need to expose a single
port externally and can block off access to the configuration features.
(I actually do use nginx in this way myself. I've included a snippet of my
config below. nb. multiple sub_filer statements requires a new nginx than in
debian stable, eg. the backports version.)
Joseph
location /motion/ {
proxy_pass http://localhost:9080/;
sub_filter 'http://localhost:9081/'
'http://$host:$server_port/camera1/';
sub_filter 'http://localhost:9082/'
'http://$host:$server_port/camera2/';
sub_filter 'http://localhost:9083/'
'http://$host:$server_port/camera3/';
sub_filter 'http://localhost:9084/'
'http://$host:$server_port/camera4/';
sub_filter 'http://localhost:9085/'
'http://$host:$server_port/camera5/';
sub_filter 'http://localhost:9086/'
'http://$host:$server_port/camera6/';
sub_filter 'http://localhost:9087/'
'http://$host:$server_port/camera7/';
sub_filter 'http://localhost:9088/'
'http://$host:$server_port/camera8/';
sub_filter 'http://localhost:9089/'
'http://$host:$server_port/camera9/';
}
location /camera1/ {
proxy_pass http://localhost:9081/;
}
location /camera2/ {
proxy_pass http://localhost:9082/;
}
location /camera3/ {
proxy_pass http://localhost:9083/;
}
location /camera4/ {
proxy_pass http://localhost:9084/;
}
location /camera5/ {
proxy_pass http://localhost:9085/;
}
location /camera6/ {
proxy_pass http://localhost:9086/;
}
location /camera7/ {
proxy_pass http://localhost:9087/;
}
location /camera8/ {
proxy_pass http://localhost:9088/;
}
location /camera9/ {
proxy_pass http://localhost:9089/;
}
> On 8 Mar 2017, at 08:35, Colin Law <[email protected]> wrote:
>
> I would have thought it is not necessary to install something like
> apache to use fail2ban. Stopping brute force attacks is exactly what
> it is intended to do, so why not use a tool designed to do exactly
> that?
>
> We just need someone with the right knowledge to guide us as to how to do it
> :)
>
> Colin
>
> On 8 March 2017 at 08:28, tosiara <[email protected]> wrote:
>> Well, if we are talking about adding 3rdpaty http software as
>> frontend, then you can set up apache or nginx with reverse proxy and
>> take control of ip logging and access control and even use digest auth
>> instead of basic
>>
>> On Wed, Mar 8, 2017 at 10:21 AM, Colin Law <[email protected]> wrote:
>>> On 8 March 2017 at 06:15, Spiros Georgakis <[email protected]> wrote:
>>>> Hello,
>>>>
>>>> Is there any way that the motion will log the client-ip that is trying to
>>>> get access onto 8081 port?
>>>>
>>>> Since motion.conf gives the option for stream authentication, I was
>>>> thinking
>>>> to block any ip that is doing a brute force attack onto username/password
>>>> credentials.
>>>>
>>>> Maybe log the client-ip in a failed log attempt.
>>>
>>> Possibly using fail2ban might be a good way of doing this. Has anyone
>>> worked out the config to use for fail2ban in conjunction with motion?
>>>
>>> Colin
>>>
>>> ------------------------------------------------------------------------------
>>> Announcing the Oxford Dictionaries API! The API offers world-renowned
>>> dictionary content that is easy and intuitive to access. Sign up for an
>>> account today to start using our lexical data to power your apps and
>>> projects. Get started today and enter our developer competition.
>>> http://sdm.link/oxford
>>> _______________________________________________
>>> Motion-user mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/motion-user
>>> https://motion-project.github.io/
>>>
>>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
>>
>> ------------------------------------------------------------------------------
>> Announcing the Oxford Dictionaries API! The API offers world-renowned
>> dictionary content that is easy and intuitive to access. Sign up for an
>> account today to start using our lexical data to power your apps and
>> projects. Get started today and enter our developer competition.
>> http://sdm.link/oxford
>> _______________________________________________
>> Motion-user mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/motion-user
>> https://motion-project.github.io/
>>
>> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
>
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3577 bytes
Desc: not available
------------------------------
Message: 3
Date: Wed, 8 Mar 2017 09:35:37 +0000
From: Richard Bown <[email protected]>
Subject: [Motion-user] security on the webserver port in motion
To: Motion discussion list <[email protected]>
Message-ID: <[email protected]>
Content-Type: text/plain; charset=US-ASCII
hi
although a very similar thread to that on "get ip client"
I didn't want to Hijack the thread.
Is there any simple way of forcing password access to the webcam server in
motion.
Useful when away from home and wanting to check the cameras. With the IP cams I
can port forward to
the cams directly and use the built in security, to only use user/password
access
But one of the cameras attached to motion is a USB camera, so the only way to
remotely check what
that is pointed at is to used the webcam server in motion, which is open access
Thanks
--
--
Best wishes /73
Richard Bown
Email : [email protected]
HTTP : http://www.g8jvm.com
nil carborundum a illegitemis
##################################################################################
Ham Call: G8JVM . QRV: 50-432 MHz + Microwave 23 cms 140W, 13 cms 100W & 3cms 5W
Maidenhead QRA: IO82SP38, LAT. 52 39.720' N LONG. 2 28.171 W
QRV VHF 6mtrs 200W, 4 mtrs 150W, 2mtrs 400W, 70cms 200W
OS: Linux Mint 18.1 x86_64 on a Dell Inspiron N5030 laptop
##################################################################################
------------------------------
Message: 4
Date: Wed, 8 Mar 2017 12:23:11 +0200
From: tosiara <[email protected]>
Subject: Re: [Motion-user] security on the webserver port in motion
To: Motion discussion list <[email protected]>
Message-ID:
<CACHTdwTq54LO9TzG-ixN1qmgKTc5Oa=zbwvtut+06tcr_04...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Aren't those settings what you need?
# Set the authentication method (default: 0)
# 0 = disabled
# 1 = Basic authentication
# 2 = MD5 digest (the safer authentication)
stream_auth_method 0
# Authentication for the stream. Syntax username:password
# Default: not defined (Disabled)
; stream_authentication username:password
# Authentication for the http based control. Syntax username:password
# Default: not defined (Disabled)
; webcontrol_authentication username:password
On Wed, Mar 8, 2017 at 11:35 AM, Richard Bown <[email protected]> wrote:
> hi
> although a very similar thread to that on "get ip client"
> I didn't want to Hijack the thread.
> Is there any simple way of forcing password access to the webcam server in
> motion.
> Useful when away from home and wanting to check the cameras. With the IP cams
> I can port forward to
> the cams directly and use the built in security, to only use user/password
> access
> But one of the cameras attached to motion is a USB camera, so the only way to
> remotely check what
> that is pointed at is to used the webcam server in motion, which is open
> access
> Thanks
>
> --
> --
> Best wishes /73
> Richard Bown
>
> Email : [email protected]
> HTTP : http://www.g8jvm.com
> nil carborundum a illegitemis
> ##################################################################################
> Ham Call: G8JVM . QRV: 50-432 MHz + Microwave 23 cms 140W, 13 cms 100W & 3cms
> 5W
> Maidenhead QRA: IO82SP38, LAT. 52 39.720' N LONG. 2 28.171 W
> QRV VHF 6mtrs 200W, 4 mtrs 150W, 2mtrs 400W, 70cms 200W
> OS: Linux Mint 18.1 x86_64 on a Dell Inspiron N5030 laptop
> ##################################################################################
>
>
> ------------------------------------------------------------------------------
> Announcing the Oxford Dictionaries API! The API offers world-renowned
> dictionary content that is easy and intuitive to access. Sign up for an
> account today to start using our lexical data to power your apps and
> projects. Get started today and enter our developer competition.
> http://sdm.link/oxford
> _______________________________________________
> Motion-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/motion-user
> https://motion-project.github.io/
>
> Unsubscribe: https://lists.sourceforge.net/lists/options/motion-user
------------------------------
Message: 5
Date: Wed, 8 Mar 2017 11:31:16 +0000
From: Stuart Howard <[email protected]>
Subject: Re: [Motion-user] Recorded Video Speed Up/Frame Loss
To: Motion discussion list <[email protected]>
Message-ID:
<CADB1SQAGq2mJW5pz432h8S=-bfzwdxttyajejyynsfq8odn...@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
?Thanks for your help Dave,
I think I'm understanding what you're saying...?
On 8 March 2017 at 05:26, MrDave <[email protected]> wrote:
> What Motion does is only record the frames that have motion and when the
> motion frames have finished it will add the specified number of post
> capture frames. This is different than the event time. The event time
> will group together all the sequences of motion frames together and call
> them an event. So for any sort of decent standard video, you should be
> specifying post capture frames. It has been contemplated to revise the
> default to automatically include all the frames (instead of just those with
> motion) in the movies. This however would break the functionality for
> those that need to just see the motion frames.
?...so essentially if I don't specify any post capture frames t?hen Motion
will only include those frames on which it has detected motion - default
behaviour, if you will, for those who want that? So that would probably
explain the sped up videos I'm getting - it could be that Motion isn't
constantly detecting movement (perhaps due to my threshold settings) even
though there's a person there moving around, and is filling frames in
around the ones where it does detect movement. For my use case, I'm
interested in capturing a sequence of smooth frames once movement has been
initially detected so I need to compensate by adding the post-capture
frames in case there is a lull in motion detection after the initial
trigger.
I'll try all of your suggestions when I get home.
Thanks again,
Stuart
-------------- next part --------------
An HTML attachment was scrubbed...
------------------------------
------------------------------------------------------------------------------
Announcing the Oxford Dictionaries API! The API offers world-renowned
dictionary content that is easy and intuitive to access. Sign up for an
account today to start using our lexical data to power your apps and
projects. Get started today and enter our developer competition.
http://sdm.link/oxford
------------------------------
_______________________________________________
Motion-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/motion-user
End of Motion-user Digest, Vol 130, Issue 5
*******************************************
