Are you suffering attacks to your servers?

James Harrison james at talkunafraid.co.uk
Sat Aug 20 05:43:19 EDT 2016


On 19/08/2016 23:10, Sergio wrote:
> 
> 
> Using netstat shows as binded to loopback interface, 127.0.0.1. This is
> normal, redis is running in protected mode.
> 
> I tried to nmap to the port 6379 from another server, and, surprisingly,
> I found the port is open.
> This is the output:

So, you appear to have an open firewall.

This is a Bad Thing.

If you're unfamiliar with iptables I'd recommend using ferm to configure
it, which lets you write a config file and have it applied.

http://ferm.foo-projects.org/ - on Ubuntu/Debian, sudo apt-get install
ferm will install it and put the config file in /etc/ferm/ferm.conf.

I've added an example firewall configuration using ferm here:

https://github.com/zaidka/genieacs/wiki/ACS-firewall-example


-- 
Cheers,
James Harrison


More information about the Users mailing list