Hi,
we had our HA server installation externally audited for potential
security problems. The report recommends that no processes but dedicated
server process should listen on external interfaces reachable through
the internet.
Well, this is quite a common security measure. However I was not able to
find a configuration option to force heartbeat to only listen on certain
IP addresses: it always listens on udp/0.0.0.0:694 plus several other
(dynamically assigned?) UDP ports like 56084, 60704, 46004, 39875.
Is there any configuration option I might have missed? If not: would
this be considered as a reasonable request for enhancement?
Regards,
Robert
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
