37
FLASH
MEDIA
SERVER
4.5
CONFIGURATION
AND
ADMINISTRATION
Configuring the server
Last updated 11/28/2012
Create folders for the verifying SWF files
1
If the
SWFFolder
value is the default, create a folder called SWFs in the application’s folder on the server.
For example, for an application called myMediaApp, create the folder applications/myMediaApp/SWFs. SWF files
in the SWFs folder verify connections to any instance of the myMediaApp application.
2
To verify SWF files for application instances, create instance folders in the SWFs directory, for example,
applications/myMediaApp/SWFs/chat01, applications/myMediaApp/SWFs/chat02, and so on.
SWF files in the SWFs directory can verify all instances of the application; SWF files within an instance folder can
verify only that instance.
Note:
Multiple SWF files may exist in either directory. A SWF file can be renamed and still used for verification as long
as it’s a copy of the client SWF file.
Restrict access to the server with a cross-domain file
You can restrict access to an edge server or the Administration Server with a cross-domain XML file. The cross-
domain XML file lets you specify a list of domains from which clients can access the edge server or Administration
Server.
1
Open
rootinstall
/conf/Server.xml and locate the
CrossDomainPath
element in the
Server
element (or the
AdminServer
element, for the Administration Server):
<Server>
...
<CrossDomainPath></CrossDomainPath>
2
Specify the location of the cross-domain file in the
CrossDomainPathElement
, for example:
<CrossDomainPath>C:/Security/config/files/fms/crossdomain.xml</CrossDomainPath>
3
Validate the Server.xml file, save it, and restart the server.
Limit access to Flash Media Administration Server
The Administration Console connects to Adobe Flash Media Administration Server, which connects to Adobe Flash
Media Server. By default, the Administration Server in installed on port 1111. Adobe recommends that you block all
external access to port 1111 so that access to the admin server is restricted only to clients that are within your firewall.
Additionally, you can restrict access to the admin server by using domain based restrictions.
By default, a client can connect to Flash Media Administration Server from any domain or IP address, which can be a
security risk. If desired, you can change this in the
AdminServer
section of the Server.xml file.
1
Open
rootinstall
/conf/Server.xml and locate the following code:
<AdminServer>
...
<Allow>all</Allow>
...
</AdminServer>
2
Edit the
Allow
element to specify which connections to Flash Media Administration Server the server responds to.
This is specified as a comma-delimited list of host names, domain names, and full or partial IP addresses, as well as
the keyword
all
. For example:
<Allow>x.foo.com, foo.com, 10.60.1.133, 10.60</Allow>
.
3
Validate the XML, save the Server.xml file, and restart the server.