Announcement

**randy** · January 14, 2019, 04:29 PM

Originally posted by MNB View Post

I too am using GeoFency are you saying there's any issue with authentication? I noticed that I'm able to create HS3 devices from GeoFency app when I either depress Entry/Exit Test and HS3 devices change every time either one is selected but I do not see my HS3 Log being update when those actions occur unless there is a error occurring. Mike

There is no issue with authentication. PHL2 does not log normal communications, only errors and warnings. When a GeoFency post is normal, it is not an error and is not logged. Debug logging is now sent to a file, when selected.

**MNB** · January 14, 2019, 04:31 PM

Originally posted by sparkman View Post

What user account did you configure within GF to authenticate to the HS server?

I used the MyHS methodology which is using my admin logon credential. Mike

**The Profit** · January 14, 2019, 04:32 PM

Originally posted by rprade View Post

You are mixing two different method. If you use MyHS, you do not control the user, HomeSeer does through the MyHS communication protocol. Unless I missed something MyHS always gives admin access.

In my MyHS service, I can select “Manage” instead of “Access” and then setup users. For each user I can select which hometroller they have access to, then on the hometroller I setup each users access level. Based on the other posts here, I assume that I should setup an HS user with Guest access rights for Geofency so that even if someone were to grab the user name and password that it would only be for guess access rights?

Sent from my iPad using Tapatalk

**MNB** · January 14, 2019, 04:35 PM

Originally posted by rprade View Post

There is no issue with authentication. PHL2 does not log normal communications, only errors and warnings. When a GeoFency post is normal, it is not an error and is not logged. Debug logging is now sent to a file, when selected.

Randy, again thanxs for the confirmation, I feel a little better as I thought I seen in an earlier post about GeoFency posting to HS Logfile.

I thought Paul was going to do release today, was waiting to download and plugin. Mike

**randy** · January 14, 2019, 04:39 PM

Originally posted by The Profit View Post

In my MyHS service, I can select “Manage” instead of “Access” and then setup users. For each user I can select which hometroller they have access to, then on the hometroller I setup each users access level. Based on the other posts here, I assume that I should setup an HS user with Guest access rights for Geofency so that even if someone were to grab the user name and password that it would only be for guess access rights?

Sent from my iPad using Tapatalk

Do you have MyHS premium? I do not have those choices.
At login I can choose between Access and Manage

In Manage, I have these choices.

**randy** · January 14, 2019, 04:42 PM

Originally posted by MNB View Post

I thought I seen in an earlier post about GeoFency posting to HS Logfile.

Only initially, before the root account is set up.

**The Profit** · January 14, 2019, 04:42 PM

Originally posted by rprade View Post

Do you have MyHS premium? I do not have those choices.
At login I can choose between Access and Manage

In Manage, I have these choices.

Yes, I pay for the premium ($24/year) so that I have access to two different HS systems.

Sent from my iPad using Tapatalk

**randy** · January 14, 2019, 04:45 PM

Originally posted by The Profit View Post

Yes, I pay for the premium ($24/year) so that I have access to two different HS systems.

Sent from my iPad using Tapatalk

OK. I am aware of what it costs. For those who don't have premium, they will always be giving admin level access.

**randy** · January 14, 2019, 04:46 PM

Originally posted by The Profit View Post

In my MyHS service, I can select “Manage” instead of “Access” and then setup users. For each user I can select which hometroller they have access to, then on the hometroller I setup each users access level. Based on the other posts here, I assume that I should setup an HS user with Guest access rights for Geofency so that even if someone were to grab the user name and password that it would only be for guess access rights?

Sent from my iPad using Tapatalk

Now, going back to this. How would someone "grab the user name and password"?

**The Profit** · January 14, 2019, 05:01 PM

Originally posted by rprade View Post

Now, going back to this. How would someone "grab the user name and password"?

I have no idea, I’m trying to figure out how to best setup Geofency so that I don’t get these log entries where someone is trying to hack into my system. I used to use the ddns option (Port 5???) and luckily didn’t notice any issues but once I started forwarding port 80 using the same ddns service, I started getting IP’s blocked in the HS log.
Because of my limited knowledge with gateways, I’m a little fearful that I’m going to make myself vulnerable.

So at the moment, I have setup a user in MyHS and also in HS with guest access and Geofency URL is the MyHS link that you posted earlier. I assume there is no way for someone to grab the user name and password with the MyHS link as it is encrypted, correct?

Sent from my iPad using Tapatalk

**randy** · January 14, 2019, 05:13 PM

Originally posted by The Profit View Post

I have no idea, I’m trying to figure out how to best setup Geofency so that I don’t get these log entries where someone is trying to hack into my system. I used to use the ddns option (Port 5???) and luckily didn’t notice any issues but once I started forwarding port 80 using the same ddns service, I started getting IP’s blocked in the HS log.
Because of my limited knowledge with gateways, I’m a little fearful that I’m going to make myself vulnerable.

So at the moment, I have setup a user in MyHS and also in HS with guest access and Geofency URL is the MyHS link that you posted earlier. I assume there is no way for someone to grab the user name and password with the MyHS link as it is encrypted, correct?

Sent from my iPad using Tapatalk

If you only use MyHS for accessing your system and don't expose it to the internet through a forwarded open port, you shouldn't get those log entries. I never do. Why do you have an external port forwarded to the IP and port of your HS server?

As far as I can tell MyHS is very secure. It is not super secret, top secret, no one can access secure, but it is reasonably secure and you should not get those log messages when using only MyHS for access.

**The Profit** · January 14, 2019, 05:21 PM

Originally posted by rprade View Post

If you only use MyHS for accessing your system and don't expose it to the internet through a forwarded open port, you shouldn't get those log entries. I never do. Why do you have an external port forwarded to the IP and port of your HS server?

As far as I can tell MyHS is very secure. It is not super secret, top secret, no one can access secure, but it is reasonably secure and you should not get those log messages when using only MyHS for access.

I have the eternal port forwarded to the IP and port of my HS server because I thought I had correctly followed the directions in your above post, guessing that I must have misunderstood....

Originally posted by rprade View Post

For those of you posting from 3rd party apps like GeoFency, PHL2 does not use its own web server, it uses the HS built-in server. The posting is still the same as before with two changes 1) it now uses your HomeSeer web server port (usually 80) so create your port forwarding rules and structure the URL accordingly.

**randy** · January 14, 2019, 05:34 PM

Originally posted by The Profit View Post

I have the eternal port forwarded to the IP and port of my HS server because I thought I had correctly followed the directions in your above post, guessing that I must have misunderstood....

I was specifically addressing port forwarding with that comment. If you are using the MyHS method posting to:

Code:

https://connected.homeseer.com/phl2api?dtype=GF

you do not need any port forwarding. MyHS takes care of secure communication with your system. All communication is encrypted. MyHS will also work whether you are at home or on the road.

If you are using DDNS and port forwarding, you will want to use credentials you have created on your HS server. You would want to give that user the minimum rights, because communication is unencrypted. Depending on how your router is configured (NAT loopback or hairpinning), it may not work locally. Most consumer routers support NAT loopback, but it is not guaranteed. A Ubiquiti USG has it enabled by default, my pfSense did not.

The rules are different if you are able to run your server securely or if you use a VPN. It is a matrix of options. Each has its advantages and disadvantages.

To over simplify, when you post through MyHS, your HS server treats it as a local connection where https://connected.homeseer.com is functionally equivalent to the local IP of your hS system, once authenticated through the MyHS server.

**jlrichar** · January 14, 2019, 06:19 PM

Originally posted by sooty View Post

Correct. The message panel is not there in V2.

I can add it if required.

Paul..

That would be really nice if you could. I use it with geofency in v1 extensively.

Sent from my iPhone using Tapatalk

**racerfern** · January 14, 2019, 07:51 PM

I just installed and not sure of the server URL I used to use connected11 or connected22. Is it now just connected.homeseer.com/PHL2API?dtype=BK

At first I got an update failed, but now I don't even get a notification on the phone. Note that this is a different phone than the one I use for PHL1

Announcement

PHLocation V2 Discussion

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment