restrict listen interface

[perler]

is there a way to restrict the network interface sobsonic is listening on via a netmask (like 127.0.0.1/32 to just listen on localhost?)

[ericvonnine]

Yes, the --host flag sets the ip and therefore the interface. I proxy my subsonic behind apache to have all traffic over https so my subsonic starts with:

Code: Select all

--host=127.0.0.1 --port=4040

You will still need a firewall on the host if it is exposed to the internet because Tomcat or some other portion of the stack leaves a number of ports listening on all interfaces regardless of this setting.

[perler]

perfect, thanks!