wiki:UbuntuSecuringDeepaMehta
Last modified 9 years ago Last modified on 04.09.2011 19:23:01

This site is work in progress!

Close public ports with iptables

Drop incoming requests on port 8080 on all interfaces but localhost:

iptables -A INPUT ! -s 127.0.0.1 -p tcp --destination-port 8080 -j REJECT

Check (from a remote client machine) if jetty is securely blocked:

nmap deepamehta.yourdomain.tld -p 8080

should return

Starting Nmap 5.00 ( http://nmap.org ) at 2011-09-02 22:17 CEST
Interesting ports on deepamehta.yourdomain.tld (xxx.xxx.xxx.xxx):
PORT     STATE    SERVICE
8080/tcp filtered http-proxy

Nmap done: 1 IP address (1 host up) scanned in 0.53 seconds