Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

If Lion server runs on OS X Lion, what is accessible from the "outside"?

If I open a port and connect it to the ip of the Lion server, will that traffic be intercepted by the server app and limiting the scope of the access to what the server app allows access too?

Will my entire file directory be available to the outside if I open the port? E.g. the Lion OS running has some other apps running and files stored on it, will this be accessible from the outside? Or does the server app intercept the incoming requests and, depending on what has been made available as a service through the server app, that is only what the outside can access?

share|improve this question
add comment

1 Answer

Server.app is used to configure the underlying OS services, so it doesn't "intercept" anything. In the case of ports, you are configuring the firewall software. In cases like file sharing you are also configuring the AFP/SMB/NFS daemons with access control lists.

Think of Server.app as just being a convenient GUI that lets you do all of this from one logical place.

Your "entire file directory" will only be served up by the AFP/SMB/NFS daemons if they are explicitly configured by you to do so. Some caution is called for here, as IIRC AFP may have a default "Administrative Share" that allows an Admin user to mount the whole volume… But that is still not something you'd normally need to be concerned about, as a user with Admin privs could simply change the sharing setup anyway.

I hope this clarifies how Server.app does what it does.

share|improve this answer
    
Great, thanks. So how does it work running other services from the machine that arent managed by the server app, such as svn, git, databases etc? Do they just get setup as normal? Can MAMP be used along side OSX lion server, is it needed? –  user773578 Feb 15 '12 at 21:10
    
Git and SVN both can be configured with work over SSH and/or HTTP, so you can enable the relevant transport services using Server.app and then configure your source control system to use the transport(s) of your choice. Databases often want their own port, which will require you to manually tweak the firewall settings. Server.app may notice your tweaks and preserve them, but I would test that carefully before relying on it. I'm not familiar with MAMP, so I can't help you there. –  Kaelin Colclasure Feb 16 '12 at 22:48
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.