Hi,
On Thu, Oct 19, 2023 at 11:54 AM Doug Herr <fedoraproject.org@xxxxxxxxxxx> wrote:
On Thu, Oct 19, 2023, at 7:05 AM, Alex wrote:
> Hi,
>
> I'm using docker on fedora38 and can't figure out how to prevent port
> 8080 from being available to the outside world. I've done quite a bit
> of reading on this, and it appears I'm not the only one having trouble
> figuring this out. This docker doc appears to indicate it shouldn't be
> listening on the external port when the -p option is not used.
[snip]
> I've tried creating an explicit rule that restricts access to port 8080
> on all interfaces except for localhost, but scanning that port
> externally still shows it's available.
Are you sure that it is docker that is answering on 8080?
Thanks so much for your help. Yes, it's definitely docker. This is a static IP on a business cable modem.
# netstat -ntap|grep docker
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 2785/docker-proxy
tcp 0 0 0.0.0.0:8025 0.0.0.0:* LISTEN 2807/docker-proxy
tcp6 0 0 :::8080 :::* LISTEN 2791/docker-proxy
tcp6 0 0 :::8025 :::* LISTEN 2814/docker-proxy
tcp 0 0 0.0.0.0:8025 0.0.0.0:* LISTEN 2807/docker-proxy
tcp6 0 0 :::8080 :::* LISTEN 2791/docker-proxy
tcp6 0 0 :::8025 :::* LISTEN 2814/docker-proxy
Here also is the IP output:
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:50:f2:09 brd ff:ff:ff:ff:ff:ff
inet 68.195.111.46/29 brd 68.195.111.47 scope global noprefixroute enp1s0
valid_lft forever preferred_lft forever
inet6 fe80::c108:8dcd:aaa6:8cfb/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:74:06:ed:e9 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
4: br-a6d9c4747d4e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:a3:8b:41:8a brd ff:ff:ff:ff:ff:ff
inet 172.29.0.1/16 brd 172.29.255.255 scope global br-a6d9c4747d4e
valid_lft forever preferred_lft forever
inet6 fe80::42:a3ff:fe8b:418a/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
6: vethb83bb21@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-a6d9c4747d4e state UP group default
link/ether f2:56:0d:6e:c4:6e brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::f056:dff:fe6e:c46e/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
