How to stop default AMQP listener on 5672?

[kurtul...@gmail.com]

Hello,

I hope that everything is OK for you and your family.

I want to close default AMQP listener on 5672 permanently because I am using SSL AMQP listener on port 5671 so there is no need 5672 to stay up & running. I have tried to close it by commenting the following line on configuration file but it doesn't work. Is there a way to close 5672 permanently?

Thanks and regards,

Ekrem

[pyh]

There is no need to close it entirely. But maybe the network filter can
help you?

regards.

[Arnaud Cogoluègnes]

In the configuration file:

listeners.tcp = none

Read more in the TLS documentation [1].

[1] https://rabbitmq.com/ssl.html#enabling-tls

[kurtul...@gmail.com]

Hello,

Thanks for the support. " listeners.tcp = none" worked.

Is there a way to close default management port 15672 also? I couldn't see anything for management ports. We want them to stay close because our audit team finds it risky to keep these ports open.

Best regards,

Ekrem

5 Kasım 2021 Cuma tarihinde saat 10:08:37 UTC+3 itibarıyla Arnaud Cogoluègnes şunları yazdı:

[Arnaud Cogoluègnes]

Configure the TLS part according to the management plugin documentation [1] and omit the configuration entries of the plain listener, that is do not add lines like:

management.tcp.port = 15672

management.tcp.ip = 0.0.0.0

[1] https://rabbitmq.com/management.html#single-listener-https

[kurtul...@gmail.com]

Hello Arnaud,

Thanks a lot for your contributions.

Best regards,

5 Kasım 2021 Cuma tarihinde saat 15:54:09 UTC+3 itibarıyla Arnaud Cogoluègnes şunları yazdı: