Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Default public listening port amounts to an open proxy #21

Open
rvalles opened this issue Apr 11, 2021 · 1 comment
Open

Default public listening port amounts to an open proxy #21

rvalles opened this issue Apr 11, 2021 · 1 comment

Comments

@rvalles
Copy link

rvalles commented Apr 11, 2021

By default, even if just a serial port is specified, tcpser will offer its services at 0.0.0.0:6400.

This is not the best default, from a security concern, as the service offered is equivalent to an open proxy.

Default behavior could be improved by e.g. listening only on the loopback interface or even not listening at all.

@go4retro
Copy link

Given how long the tool has been used and expectations, I think changing default behavior would break quite a few things. But, I think adding some verbiage to use -p0.0.0.0:6400 to minimize security for outbound only uses would be fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants