Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When I recently discovered about accessing ports via your browser at a domain level. Example, I accessed my domain at port 11211, I got an output of this:

ERROR
ERROR
ERROR
ERROR
ERROR
ERROR
ERROR
ERROR
ERROR

Is there any security precautions I need to consider taking into my server? How can I prevent users accessing at port 11211 but allowing my server to access to memcached? Is it a security concern of able to connecting via domain.com:11211?

share|improve this question
add comment

2 Answers 2

up vote 1 down vote accepted

If you have a server, you should close all your ports with a firewall, except those needed by the service. If memcached is used in local, close the connection from outside. If the memcached is accessed from an other server, just open from this server and not from everywhere

share|improve this answer
    
I only use memcached in local, but exactly how do I close all ports and allow local services on the server use memcached? –  Burning the Codeigniter Dec 23 '11 at 14:46
    
Put a firewall on your server and ask it to close all the ports, except those needed by your service. On linux, look at iptables, on others, don't know –  Dom Dec 26 '11 at 9:24
add comment

Since memcache has no authentication implemented this is a big security concern.
Anyone can connect to your memcache server and read, delete, add or modify anything he wants.

Depending on your setup, configure your firewall accordingly (close all ports except the ones you need to be open) and/or let memcache bind only to localhost.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.