[chef] Restrict services to ipaddress|interface


Chronological Thread 
  • From: Anikeev Serghey < >
  • To: " " < >
  • Subject: [chef] Restrict services to ipaddress|interface
  • Date: Wed, 21 Aug 2013 16:45:36 +0300
  • Authentication-results: smtp2.mail.yandex.net; dkim=pass

Greetings!


I am happy chef-server 11 user.
But several days ago i started to improve security on our infrastructure 
server and saw this:
epmd      19402   chef_server    3u  IPv4 293233253      0t0  TCP *:epmd 
(LISTEN)
beam.smp  19390   chef_server    7u  IPv4 293233279      0t0  TCP *:48596 
(LISTEN)
java      19456   chef_server    9u  IPv4 293234010      0t0  TCP *:40414 
(LISTEN)
java      19456   chef_server   10u  IPv4 293234011      0t0  TCP *:d-s-n 
(LISTEN)
java      19456   chef_server   11u  IPv4 293234012      0t0  TCP *:45130 
(LISTEN)
beam.smp  19608   chef_server    8u  IPv4 293236395      0t0  TCP *:47818 
(LISTEN)
beam.smp  19823   chef_server    8u  IPv4 293237074      0t0  TCP *:56503 
(LISTEN)

Those 7 services which listen on all interfaces.
The question is how to restrict them to loopback for example?

Thank You.




  • [chef] Restrict services to ipaddress|interface, Anikeev Serghey, 08/21/2013

Archive powered by MHonArc 2.6.16.

§