[Bio-Linux] Fwd: Public Facing Galaxy Server Configuration

[Tim Booth]

Hi Ryan,

I would imagine that your local network firewall is blocking incoming
access on this port.  The default settings on the Bio-Linux internal
firewall do not try to distinguish between what is on the local network
and what is on the wider internet, so if port 8080 is accessible from
the computer next door it should be accessible from anywhere.

You need to talk to your local network admins.  They may say that
opening port 8080 to the whole internet is insecure, and I'd be inclined
to agree with them.  You should consider if you can ask for specific
trusted hosts to be given access.  Failing that, if your machine is
publicly accessible via SSH then you can tunnel the connection, so that
people will only be able to see Galaxy once they have successfully
connected with SSH.

Let me know if you want more specifics on that.

Cheers,

TIM

On Fri, 2015-08-14 at 08:10 -0600, Ryan Johnson wrote:
> Hi All,
> 
> I have Bio-Linux + Galaxy set up to face the public on port 8080
> (without Apache) for some quick proof of concept tests. But I am
> encountering an issue with users trying to access this machine from
> outside the local network. I have the Bio-Linux OS firewall temporarily
> disabled for debugging as well. My users on the local network can load
> the web interface but those on the WAN cannot. Are their more security
> settings I have to configure or is there a setting in the Galaxy-Server
> configuration file that I need to change?
> 
> Kindly,
> Ryan
> 
> 

-- 
Tim Booth <tbooth at ceh.ac.uk>

Centre for Ecology and Hydrology
Maclean Bldg, Benson Lane
Crowmarsh Gifford
Wallingford, England
OX10 8BB 

http://environmentalomics.org/bio-linux
+44 1491 69 2297