Hi,
On Thu, Oct 19, 2023 at 11:54 AM Doug Herr <fedoraproject....@wombatz.com>
wrote:
> On Thu, Oct 19, 2023, at 7:05 AM, Alex wrote:
> > Hi,
> >
> > I'm using docker on fedora38 and can't figure out how to prevent port
> > 8080 from being available to the outside world. I've done quite a bit
> > of reading on this, and it appears I'm not the only one having trouble
> > figuring this out. This docker doc appears to indicate it shouldn't be
> > listening on the external port when the -p option is not used.
> [snip]
> > I've tried creating an explicit rule that restricts access to port 8080
> > on all interfaces except for localhost, but scanning that port
> > externally still shows it's available.
>
> Are you sure that it is docker that is answering on 8080?
>
Thanks so much for your help. Yes, it's definitely docker. This is a static
IP on a business cable modem.
# netstat -ntap|grep docker
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN
2785/docker-proxy
tcp 0 0 0.0.0.0:8025 0.0.0.0:* LISTEN
2807/docker-proxy
tcp6 0 0 :::8080 :::* LISTEN
2791/docker-proxy
tcp6 0 0 :::8025 :::* LISTEN
2814/docker-proxy
Here also is the IP output:
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state
UP group default qlen 1000
link/ether 52:54:00:50:f2:09 brd ff:ff:ff:ff:ff:ff
inet 68.195.111.46/29 brd 68.195.111.47 scope global noprefixroute
enp1s0
valid_lft forever preferred_lft forever
inet6 fe80::c108:8dcd:aaa6:8cfb/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue
state DOWN group default
link/ether 02:42:74:06:ed:e9 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
valid_lft forever preferred_lft forever
4: br-a6d9c4747d4e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP group default
link/ether 02:42:a3:8b:41:8a brd ff:ff:ff:ff:ff:ff
inet 172.29.0.1/16 brd 172.29.255.255 scope global br-a6d9c4747d4e
valid_lft forever preferred_lft forever
inet6 fe80::42:a3ff:fe8b:418a/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
6: vethb83bb21@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue master br-a6d9c4747d4e state UP group default
link/ether f2:56:0d:6e:c4:6e brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 fe80::f056:dff:fe6e:c46e/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
