Icecast Streaming Media Server

[kaneza]

Hello,
i have been trying to listen my radio over a firewall connection that allows only port 80. Using apache mod_rewrite i rewrote my request to map my icecasr server correctly,

but i cant get the original IP address. icast is showing me that the originating IP is 12.0.0.1 and i cant get the X-Forwarded-For (which is the original client IP) how to get it passed to my auth_-url?

thanks

[karlH]

You should really use the forwarding rules of the NAT to do this, not an application. While it could be possible to use the header to indicate the source address, that would lead to potential faking of addresses in the common case usage.

If you really want to do this then extract the header where the client _t is created and set the IP up based on the header instead of the incoming address.

karl.

[kaneza]

so you mean using the apache mod_rewrite is not the best way to get icecast running on port 80? can you give me an example on how to do it?

[karlH]

running on port 80 just requires the OS to bind to that port, normally it's reserved for root user only which is why there is the <changeowner> directive, ie start as root (so the bind works) then changeowner to the stated user. Alternatively you could use a NAT rule to change the destination port number to say port 8000

karl.

[kaneza]

Let me explain more my current situation, i have icecast running on port 8000 and i want listeners to be able to listen on port 80, using apache mod rewrite i created a rule that interprete the reqests though a specific virtual host and rewrite it into icecast link (server:port/mount)

<VirtualHost *:80>
ServerName music.myserver.dev
DocumentRoot /srv/www/htdocs
ServerAdmin root@myserver.dev
RewriteEngine On
RewriteRule ^/(.*) http://127.0.0.1:8000/mount [P]
UseCanonicalName Off
</VirtualHost>

i can listen to the radio connecting to music.myserver.dev but internal IP (127.0.0.1) is the one passed to my script as the originating IP. not the real client IP. So i was wondering if icecast can forward me the real client IP

[karlH]

As I've already said, you can do but you have to patch the code to get the IP from a supplied header instead of the socket..

karl.

[kaneza]

can you help me see where i have to change in the source code in order to get it working? i would like to add an additional information in those information sent when doing url_auth such as forward-ip

[karlH]

depends on which way you want to do it, if you want to add extra fields to auth_url POST then you'll need to edit the auth_url.c file and send whatever you want from there. You could just get the IP from the header (httpp_getvar X_FORWARD_FROM) in there instead of the ip in the connection_t, that would work for POST only, not for say listclients. The other way is to replace the real IP with the one from the header after the httpp_parse is successful in connection.c

karl.

[kaneza]

i think that adding an additional parameter is better, i will have a look into the source code tomorrow and maybe it will be committed to the icecast future editions. as we all know running icecast on firewalled connections is always an issue and that rewrite is a good solution.

[kaneza]

i have changed auth_url.c like this but it doesnt work


ipaddr = util_url_escape (client->con->ip);
ipaddrk = httpp_getvar (client->parser, X_FORWARD_FROM);

if (ipaddr =='127.0.0.1')
ipaddr = util_url_escape (ipaddrk);
else
ipaddr = ipaddr;

[karlH]

try something like

[kaneza]

when i compile i get the following error:

[karlH]

if you haven't got the symbol defined as you had with your sample then use the real header name in in double quote eg "x-forward-from"

karl.

[kaneza]

so my code should be then

[karlH]

yes, assuming that is the header you are checking for

karl.