mongod binds all network interfaces and accepts all request without any auth on port 27017 and 28017.
It means anyone can access mongod from worldwide. I think it's a little bit danger default setting.
Is it possible to binds only localhost by default?
- is depended on by
-
DOCS-1732 Document new default, Bind to localhost by default in RPM and debs only
-
- Closed
-
- related to
-
SERVER-4216 [SECURITY] mongodb 10gen debian package listens on all interfaces by default
-
- Closed
-