Quote from: dazzling2865 on March 03, 2014, 05:32:49 PM

Quote from: Taugeran on March 03, 2014, 05:19:37 PM

Quote from: dazzling2865 on March 03, 2014, 05:01:14 PM

Quote from: HellDiverUK on March 03, 2014, 04:54:00 PM

Quote from: dazzling2865 on March 03, 2014, 03:21:14 PM

I gain nothing by inventing a story like this. The fact is a BTCG member hacked my miner and I can't see how given the cgminer conf is intact. So I was hoping for a bit of help, like it's probably been done using X, Y, Z method and here's how to help avoid that. I posted in this forum as I think BTCG has some responsibility to stop it's members behaving in this way.

SSH to the miner, screen to the cgminer instance, change pool details, don't save config. That's how.

BTC Guild has zero responsibility. It's your responsibility to secure your equipment, not BTC Guilds. Roll Eyes

Thank you. That is helpful. All passwords changed and api-allow in cgminer now locked down to our PHP based web monitors server IP address. I named and shamed the BTCG user/worker and surprised that BTCG would not look at their account to see if this is widescale fraud.

Is there any way to allow 2 different IP address to access CG Miner? I want to run CGremote locally on LAN and PHP web based script remotely so that's 2 completely different IP addresses.

API-allow takes a comma separated list. If php and cgremote both need write access:

--API-allow W:xxx.xxx.xxx.xxx,yyy.yyy.yyy.yyy

Great. I do have 127.0.0.1 which I think if for the miners GUI to work i.e. to see itself followed by the remote IP but seems CGminer objects to 3 IPs? i.e. --API-allow W:127.0.0.1,yyy.yyy.yyy.yyy, zzz.zzz.zzz.zzz. Is there a limit of 2 IPs?

Cheers for the help.

No, there is no hard limit
(FYI, I wrote the API in cgminer Tongue

)

That space after the "," is the cause of why the 3rd one is ignored

... and on a related note:
https://bitcointalk.org/index.php?topic=28402.msg5534048#msg5534048