From: Alex M. <kil...@ne...> - 2007-04-04 12:17:39
|
Hello, All! as one can find, ext:make-server-socket takes only port argument, it doesn't ask which interface to bind to. actually it binds to all interfaces available -- as if '0.0.0.0' was passed. certainly it's not a bug of itself, but it might have a nasty effect if you use SLIME and do not use firewall. on other systems SLIME binds socket to localhost interface (127.0.0.1), so it's not normally available from outside, and one needs some SSH tunneling to connect to remote box, for example. but ABCL backend binds to 0.0.0.0, so it's available from remote by default, unless you block it with firewall. so i just would like to warn people to be careful with this. certainly it's very unlikely that someone scans for SLIME security holes :), but who knows.. With best regards, Alex Mizrahi. |