How can I open port 1121 for specified ips? I have memcache installed, and I need to access to memcache from another server for this in /etc/memcached.conf I set my ip -l 192.0.0.106. But after this anyone can get access to my memcache server via telnet 192.0.0.106 11211.
3 Answers
A secure way would be to allow only localhost and then use a vpn or ssh tunnel to access that from the connecting server.
answered Sep 22, 2011 at 12:02
Use iptables (I assume you are using linux), to restrict what hosts have access to the port memcached is listening on.
The official documentation says: "By default memcached listens on TCP and UDP ports, both 11211. -l allows you to bind to specific interfaces or IP addresses. Memcached does not spend much, if any, effort in ensuring its defensibility from random internet connections. So you must not expose memcached directly to the internet, or otherwise any untrusted users. Using SASL authentication here helps, but should not be totally trusted."
You limit access to memcached by not allowing connections to the world wide web.
