Easysoft ODBC-ODBC Bridge Web Administrator

   Version &oob_version;

Statistics
Configuration
Data Sources
Security
Information

Data Access by Easysoft

Server Access Control help
Allowed Access Denied Access
&oob_entry1; &oob_entry2;
&oob_entry3;

Server Access Control

You can use this form to define access to the OOB Server. Add IP (or IP/Mask) addresses to the allow and deny lists to define which machines the server accepts connections from.

Server allow/deny lists

The Allowed Access list and Denied Access list define the hosts which may connect to the Easysoft OOB Server. The server consults the Deny access list first. If the client address matches an entry in this list the client is denied access. If there is no match for the client in the Deny list the Server consults the Allowed list. If the Allowed list is empty the client is allowed access. If there are any entries in the Allowed list then the client is only allowed access if it matches an entry in this list.

The entries in either list must consist of full dotted quad notation IP addresses (e.g. 194.131.236.4) and may be followed by an optional "/" and a network mask (e.g. 192.168.5.0/255.255.255.0 specifies the private class C address 192.168.5). You can use the address/mask notation to specify any network address. If you omit the network mask it defaults to 255.255.255.255 i.e. an exact match for the specified IP address.

To delete an entry from either list click on the entry you want to delete.

If you have just installed the OOB Server and selected the "initially secure" option then the "Denied Access" column will contain 0.0.0.0/0.0.0.0 (which denies everyone access to the OOB Server).

There is one special entry you may see in the Deny List - a '*'. If the first entry in the Deny List is a single '*' then all clients are denied access. This entry is placed in the Deny List during the installation when you elect to have an initial secure install. To allow OOB clients to connect you will need to delete this entry by clicking on the '*' link.

DSN Access Control

You can use this form to define access to a particular DSN. Add IP (IP/Mask) addresses or usernames to the allow and deny lists to define which machines or users can use a particular DSN.

Any client connecting to the OOB Server must be allowed access to the server as defined in the server access control before DSN access control is checked.

DSN allow/deny lists

The DSN Allowed Access list and Denied Access list define the hosts and users which may access a particular DSN. The server consults the Deny access list first. If the client address/username matches an entry in this list the client is denied access. If there is no match for the client/username in the Deny list the Server consults the Allowed list. If the Allowed list is empty the client/user is allowed access. If there are any entries in the Allowed list then the client/user is only allowed access if it matches an entry in this list.

The entries in either list must consist of full dotted quad notation IP addresses (e.g. 194.131.236.4) which may be followed by an optional "/" and a network mask (e.g. 192.168.5.0/255.255.255.0 specifies the private class C address 192.168.5) or usernames. You can use the address/mask notation to specify any network address. If you omit the mask from an IP address it defaults to 255.255.255.255 i.e. an exact match for the specified IP address.

If you add a username to either list it is the LogonUser attribute used by the OOB client to log the OOB Server thread/process into that account before allowing access to a DSN.

To delete an entry from either list click on the entry you want to delete.

Note

As a special case (to avoid having to name every user when adding an IP address to the DSN allow list) the deny list is checked for the current user but if it does not exist there the user gets access to the DSN.