Nginx as a reverse proxy

Question

Apache HTTP Server

Installed, configured - Apache now hangs on port 8080.
How to close this port so that no one has direct access to Apache?
OS - Ubuntu Server 10.04

Answer 1

write Listen only 127.0.0.1
Listen 127.0.0.1:8080

Answer 2

There is no point in all these towns with iptables, it looks like if you made a window in the house, then to board it up with boards. The listen directive suggested above is the correct way.

Answer 3

Well, or at the level of the firewall.
iptables -t filter -A INPUT -i eth0 -p tcp --dport 8080 -j DROP
to remove the rule
iptables -t filter -D INPUT -i eth0 -p tcp --dport 8080 -j DROP
*I can't vouch for the syntax, iptables I do not use it, Google prompted these commands
Perhaps instead of eth0 you will need to specify another interface.

Answer 4

If on Linux it is possible in iptables By the first rule, you allow packets coming from nginx. Yours may be 127.0.0.1 or whatever. Second you deny all other packages
iptables -A INPUT -p tcp -s [АЙПИ.НДЖИНКСА] --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp --dport 8080 -j DROP

Answer 5

For Ubuntu, a wrapper over iptables is used - ufw.
Therefore, you can close this port like this sudo ufw deny 8080.