MongoDB 3.5.7 introduces a new line of protection from unauthorized access: as of this release, MongoDB servers will only listen for connections on the local host unless explicitly configured to listen on another address. The next production release, 3.6, incorporates this change.

Before changing this new default behavior, users are encouraged to review our Security Checklist.

To make MongoDB servers accept connections from remote and local sources, either:

• Set --bind_ip 0.0.0.0 on the command line, or set the equivalent parameter, net.bindIp, in your configuration file:

  net:                                                                                                
     bindIp: 0.0.0.0
  

  Advanced deployments running on hosts with multiple network interfaces may find other values of net.bindIp useful.

or

• Use the new mongod --bind_ip_all command line switch, or enable the equivalent parameter, net.bindIpAll, in your configuration file:

  net:                                                                                                
    bindIpAll: true
  

When MongoDB is only listening for connections on the local host, remote clients will be unable to connect. Connection attempts from remote clients may see error messages such as "Connection refused". If your MongoDB servers need to accept external network connections, please go through our Security Checklist before following the instructions above.