Mac OS X Server 10.2 or Later: How to Limit QuickTime Streaming to Selected IP Addresses

In the default configuration, QuickTime Streaming Server is available on all configured interfaces and IP addresses. A multi-port server would have QuickTime Streaming Server available to clients connecting to any interface. The server can be configured to serve from one or more specified IP addresses by using the "bind_ip_addr" property in the QuickTime Streaming Server configuration file. Follow these steps:

1. Open this file in a text editor: /Library/QuickTimeStreaming/Config/streamingserver.xml

Note: If you need help with this step, see technical document 106619, "Mac OS X Server: How to Locate and Edit Configuration Files".

2. Find the line:

<PREF NAME="bind_ip_addr" >0</PREF>

3. Edit the line to look like this:

<LIST-PREF NAME="bind_ip_addr" >

  <VALUE>10.1.1.1</VALUE>

  <VALUE>10.1.1.2</VALUE>

</LIST-PREF>

Note: You would replace the two IP addresses in the entry above with the two actual addresses that you wish to bind to. Use of two addresses is only an example. You could bind to more or fewer by adding or deleting an address line in the entry above. Do not include localhost (127.0.0.1) in this list, because DSS always binds to localhost by default, in addition to the listed IP addresses in the bind_ip_addr pref. Changes take effecrt when you restart the server.

You do not have to kill and restart the server if you make changes to the rtsp_port pref or the bind_ip_addr pref. The server will dynamically stop listening on old ports and IP address and start listening on the new ones if you send kill -HUP (SIGHUP). You must send kill using the root account, so you may use su or sudo. Example syntax would be:

sudo kill -HUP <pid>