Actions
Task #2017
closed
Secure sp.d4science.org
Status:
Closed
Priority:
High
Assignee:
_InfraScience Systems Engineer
Category:
System Application
Target version:
Start date:
Jan 20, 2016
Due date:
% Done:
100%
Estimated time:
Infrastructure:
Production
Description
tomcat answers to the 8080 port without restrictions.
It should be better to disable the http port altogether, I see that the ajp connector is used to talk with the apache web server. The ajp port is also open to the world, it should be limited to localhost only.
Last, some unused services are active: rpcbind, rpc.statd. They should be disabled.
Updated by
Actions
