Comments (5)
PlotNG UI is designed to query multiple PlotNG servers to display a single consolidated view of all plotters. If PlotNG is forced to only serve localhost then this feature will not work. I suggest you can setup your PC firewall to block incoming traffic to the port (default 8444) for your specific setup.
from plotng.
But why can't the admin choose to not serve an open port on public interfaces? A firewall is for network level filtering around servers one has no control over. But since i'm running the server i should be able to just not expose a daemon on all interfaces, and keep it safely on 127.0.0.1 to reduce the attack surface. If I don't open daemons on internet connected interfaces there's no need for a firewall at all. Thanks.
from plotng.
@carlosvsilva, why not handle this in the same way you're dealing with all of the various ports (55400, 8555, 8559, 8560, 9256) that the Chia software itself opens?
from plotng.
All other daemons open mostly on 127.0.0.1 alone, apart from chia full node which I believe actually needs to receive connections from the Internet to sync and do its thing otherwise may not work well. I'm exploring with AppArmor see if I can confine chia node and farmer without breaking them. Other than chia, only SSH accepts outside authenticated connections for security.
netstat output:
`
Proto Recv-Q Send-Q Endereço Local Endereço Remoto Estado PID/Program name
tcp 0 0 0.0.0.0:8444 0.0.0.0:* ESCUTA 2917/chia_full_node
tcp 0 0 0.0.0.0:8447 0.0.0.0:* ESCUTA 2915/chia_farmer
tcp 0 0 127.0.0.1:9256 0.0.0.0:* ESCUTA 2919/chia_wallet
tcp 0 0 127.0.0.1:55400 0.0.0.0:* ESCUTA 1777/chia_daemon
tcp 0 0 127.0.0.1:8555 0.0.0.0:* ESCUTA 2917/chia_full_node
tcp 0 0 127.0.0.1:8559 0.0.0.0:* ESCUTA 2915/chia_farmer
tcp 0 0 127.0.0.1:8560 0.0.0.0:* ESCUTA 2913/chia_harvester
tcp 0 0 127.0.0.53:53 0.0.0.0:* ESCUTA 1419/systemd-resolv
tcp 0 0 0.0.0.0:22 0.0.0.0:* ESCUTA 1654/sshd: /usr/sbi
tcp 0 0 127.0.0.1:631 0.0.0.0:* ESCUTA 1468/cupsd
`
from plotng.
Personal firewall is the only viable way to achieve the high security you are looking for. Just block all the ports you don't want to open.
from plotng.
Related Issues (20)
- Not saving logs? (Windows 10) HOT 2
- Plot Delay + Stagger unexpected behavior!? (Windows 10) HOT 17
- Resume work (pick up running chia plots create processes) HOT 15
- Split client/server commands HOT 3
- Remove gob encoding HOT 1
- REQ: Options to restart / HOT 1
- How to quit UI? HOT 1
- Graceful Exit HOT 3
- GUI Mouse doesn't work in PuTTY HOT 2
- Update the read me HOT 1
- Test -alternate-mouse on a mac HOT 2
- MadMaxPlotter improvements HOT 3
- Failed to start chia command: fork/exec /madmax: permission denied HOT 1
- madMAx Temp Directories HOT 1
- MadMax Plotter Being Ignored on Windows HOT 2
- No logfiles since 0.23 release HOT 4
- Feature request: replot to pools HOT 4
- Don't working with official 1.2.0 chia release HOT 2
- madmax don't wait for copy before continuing? HOT 11
- No AsyncCopy in latest release (0.26)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from plotng.