3 Replies Latest reply on Jun 11, 2011 1:28 PM by jaikiran pai

    TCP security questions (5.1.0.GA)

    Björn Danielsson Newbie

      I have just started porting a GlassFish project to JBoss 5.1.0.GA. I noticed that JBoss by default binds all listening sockets except one to 127.0.0.1. I think such a security policy is excellent by the way, and I wish GlassFish and Tomcat had the same defaults.

       

      But I have a question to the community here, a twofold question actually:

       

      1. How do I configure the address binding for the single randomly-numbered port that is listening on 0.0.0.0?

       

      2. Why are only 14 of 16 sockets controlled by ${jboss.bind.address}? Of the remaining 2 sockets one is bound to 127.0.0.1 regardless of ${jboss.bind.address} and the other one is bound to 0.0.0.0. Has this been dealt with in later JBoss versions?

       

      PS. I tried the other profiles also: web, standard, and minimal do not open this randomly-numbered port bound to 0.0.0.0. But my project needs the Java EE features.