markmon icon indicating copy to clipboard operation
markmon copied to clipboard

markmon listens on all interfaces instead of just localhost

Open Habbie opened this issue 9 years ago • 0 comments

$ sudo netstat -an | grep 3002
tcp6       0      0  ::1.3002               ::1.53506              ESTABLISHED
tcp6       0      0  ::1.53506              ::1.3002               ESTABLISHED
tcp46      0      0  *.3002                 *.*                    LISTEN
$ sudo lsof -i tcp:3002 -nn
COMMAND     PID  USER   FD   TYPE             DEVICE SIZE/OFF NODE NAME
Google    10574 peter  249u  IPv6 0xf11290323e1efd77      0t0  TCP [::1]:53506->[::1]:exlm-agent (ESTABLISHED)
node      49338 peter   11u  IPv6 0xf112903217839577      0t0  TCP *:exlm-agent (LISTEN)
node      49338 peter   18u  IPv6 0xf1129032193b1377      0t0  TCP [::1]:exlm-agent->[::1]:53506 (ESTABLISHED)
$ ps auwwx |grep markmon
peter           49338   0.0  0.2  3101248  26064   ??  S    20Sep16   0:12.12 node /usr/local/bin/markmon --port 3002 --command pandoc -t HTML5 --mathjax

(exlm-agent is listed as port 3002 in /etc/services)

markmon was started by https://packagecontrol.io/packages/Markmon%20real-time%20markdown%20preview

This means that, unless I firewall carefully, I am exposing my document to my local LAN, or with v6, perhaps the whole world.

Habbie avatar Oct 02 '16 14:10 Habbie