From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1IirsX-00080c-Ta for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:27:05 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1IirsW-00080P-Ec for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:27:05 -0400 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IirsW-00080M-9L for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:27:04 -0400 Received: from mx1.redhat.com ([66.187.233.31]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IirsV-0000Tb-Vw for qemu-devel@nongnu.org; Fri, 19 Oct 2007 09:27:04 -0400 Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.13.8/8.13.1) with ESMTP id l9JDQvEF022773 for ; Fri, 19 Oct 2007 09:26:58 -0400 Received: from file.surrey.redhat.com (file.fab.redhat.com [10.33.63.6]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l9JDQut4004748 for ; Fri, 19 Oct 2007 09:26:57 -0400 Received: (from berrange@localhost) by file.surrey.redhat.com (8.13.1/8.13.1/Submit) id l9JDQu2Q013125 for qemu-devel@nongnu.org; Fri, 19 Oct 2007 14:26:56 +0100 Date: Fri, 19 Oct 2007 14:26:56 +0100 From: "Daniel P. Berrange" Subject: Re: [Qemu-devel] QEMU listens on 0.0.0.0 Message-ID: <20071019132656.GB11714@redhat.com> References: <4718A07D.90802@ums.usu.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4718A07D.90802@ums.usu.ru> Reply-To: "Daniel P. Berrange" , qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org On Fri, Oct 19, 2007 at 06:18:05PM +0600, Alexander E. Patrakov wrote: > Hello, > > "qemu -redir something" listens on the redirected port on all network > interfaces, and there is no way to override this. This behaviour has > possible security implications, so please add an option to listen only > on the specified interface or IP address. > > The same applies to the VNC port. No it doesn't. qemu -vnc 127.0.0.1:0 Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|