How to close sphinx from external access?

Question

Sphinx

Hello everyone, tell me how to close sphinx from external access so that they cannot get from the Internet, but only to have access by ip from their server. For example, there is a site and there is an index.php file in it, it contains connections to sphinx, and so that only from this site (the ip of the server where the site is located) access to the search is allowed. I would really appreciate your help!

Answer 1

Iptables or any other firewall

Answer 2

By default, Sphinx listens on all ips. There is even a reported vulnerability about this - https://www.cvedetails.com/cve/CVE-2019-14511/ (it was fixed in Manticore Search)
It is enough just to specify the required ip in the config, on which it can accept connections:
Well, or move on Manticore Search - there by default localhost + a bunch of other goodies.