-
Type: Bug
-
Resolution: Duplicate
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Networking, Security, Usability
bind_ip supports more then standard ipv4 dotted notation, which makes is easy to mess things up.
--bind_ip 0 for example represents 0.0.0.0, which will listen to all available interfaces.
--bind_ip 3232235521 becomes 192.168.0.1
--bind_ip 192.168.0.256 becomes 192.168.1.0
the risk of supporting the decimal notation is when creating the config files, or passing the argument, a empty variable is in many cases treated as a 0 - so when you thought you were binding to a specific interface - and afterwards it does indeed listen to that interface - you actually are listening to all of them.
In addition providing an empty net.bindIp listens to all interfaces.
- duplicates
-
SERVER-14927 Bad bind_ip should fail, not listen on all addresses
- Closed
- is duplicated by
-
SERVER-15630 Empty net.bindIp listens to all interfaces
- Closed
- is related to
-
SERVER-14927 Bad bind_ip should fail, not listen on all addresses
- Closed
-
SERVER-15630 Empty net.bindIp listens to all interfaces
- Closed