#998198 nftlb: should only listen on localhost by default

Package:
nftlb
Source:
nftlb
Description:
nftables load balancer
Submitter:
Witold Baryluk
Date:
2021-10-31 21:03:05 UTC
Severity:
normal
#998198#5
Date:
2021-10-31 21:02:16 UTC
From:
To:
Dear Maintainer,

just installing nftlb package, without configuring it, will make nftlb
daemon listen on port 5555 on all interfaces. I would suggest only
listening on localhost by default instead. This way if it is installed
for testing, it is not exposed by default on public network. If one wants
to have it accessible from other machines, it would need to be configured
anyway in more detail, than what defaults provide.

Regards,
Witold


root@debian:~# ss -apn | grep nft
u_str ESTAB      0      0                                                 * 6204                                               * 15643   users:(("nftlb",pid=1983,fd=2),("nftlb",pid=1983,fd=1))
u_dgr ESTAB      0      0                                                 * 16584                                              * 17418   users:(("nftlb",pid=1983,fd=3))
tcp   LISTEN     0      2                                                 *:5555                                               *:*       users:(("nftlb",pid=1983,fd=6))