Bug#297252: psi: PSI always binds port 8010 on address 0.0.0.0
Florian Reitmeir
Version: 0.9.3-1
Severity: normal
Hello,
psi alwas listens on port 8010 bind on 127.0.0.1 for incoming tcp
connections.
* there is no way of disabling it
* on all my host this does not work because i use NAT, and no portforwarding
* i don't intend to use the feature
And i think a listening socket for no use, a user cannot disable which is
binding at 0.0.0.0 is potential security risk.
There is a way, to "disable it" by force the port to "0", which raises
the question how the binding is done in the source. A simple option in
an Config File oder GUI would do very fine.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-ac12
Locale: LANG=C, LC_CTYPE=de_AT@euro (charmap=ISO-8859-15)
Versions of packages psi depends on:
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libgcc1 1:3.4.3-9 GCC support library
ii libqca1 1.0-6 Qt Cryptographic Architecture - sh
ii libqt3c102-mt 3:3.3.3-8 Qt GUI Library (Threaded runtime v
ii libstdc++5 1:3.3.5-8 The GNU Standard C++ Library v3
ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li
ii libxext6 4.3.0.dfsg.1-10 X Window System miscellaneous exte
ii xlibs 4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Jan Niehusmann
> There is a way, to "disable it" by force the port to "0", which raises
> the question how the binding is done in the source. A simple option in
> an Config File oder GUI would do very fine.
PS: I'd agree that a separate option "disable port" would be better, but
I prefer not to change the GUI. Otherwise, the translations provided by
upstream would not match the debian version of psi any more.
Jan