From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Iirzl-0003Q5-DY for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:34:33 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Iirzk-0003P7-Op for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:34:33 -0400 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Iirzk-0003Oz-LY for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:34:32 -0400 Received: from relay4.usu.ru ([194.226.235.39]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1Iirzk-0002fe-81 for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:34:32 -0400 Received: from relay4.usu.ru (localhost [127.0.0.1]) by relay4.usu.ru (PostSystem) with ESMTP id 697C517EFE for ; Fri, 19 Oct 2007 19:34:35 +0600 (YEKST) Received: from usu2.usu.ru (usu2.usu.ru [194.226.237.16]) by relay4.usu.ru (PostSystem) with ESMTP id E47CE17EFE for ; Fri, 19 Oct 2007 19:34:34 +0600 (YEKST) Received: from usu2.usu.ru (localhost.usu2.usu.ru [127.0.0.1]) by usu2.usu.ru (Postfix) with ESMTP id 715E6A7EAC for ; Fri, 19 Oct 2007 19:34:27 +0600 (YEKST) Received: from ums.usu.ru (ums.usu.ru [194.226.236.116]) by usu2.usu.ru (Postfix) with ESMTP id 493B1A7E95 for ; Fri, 19 Oct 2007 19:34:27 +0600 (YEKST) Message-ID: <4718B25E.1010209@ums.usu.ru> Date: Fri, 19 Oct 2007 19:34:22 +0600 From: "Alexander E. Patrakov" MIME-Version: 1.0 References: <4718A07D.90802@ums.usu.ru> <20071019132656.GB11714@redhat.com> In-Reply-To: <20071019132656.GB11714@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [Qemu-devel] Re: QEMU listens on 0.0.0.0 Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" , qemu-devel@nongnu.org Daniel P. Berrange wrote: > On Fri, Oct 19, 2007 at 06:18:05PM +0600, Alexander E. Patrakov wrote: >> Hello, >> >> "qemu -redir something" listens on the redirected port on all network >> interfaces, and there is no way to override this. This behaviour has >> possible security implications, so please add an option to listen only >> on the specified interface or IP address. >> >> The same applies to the VNC port. > > No it doesn't. > > qemu -vnc 127.0.0.1:0 Indeed. Thanks for the tip. But the original "-redir" report still stands. -- Alexander E. Patrakov