I decided it'd be easier & safer to host squid-deb-proxy in a LXD container rather than the host. My host doesn't route inbound to LXD from other networks, and all the Juju machines can see it.
On Tue, Aug 16, 2016 at 12:30 AM, John Meinel <j...@arbash-meinel.com> wrote: > ... >> > > >> +### tuple ### allow any 8000 0.0.0.0/0 any 0.0.0.0/0 in >> +-A ufw-user-input -p tcp --dport 8000 -j ACCEPT >> +-A ufw-user-input -p udp --dport 8000 -j ACCEPT >> + >> >> > If I'm reading this one correctly, it also means that anyone from *any* IP > address (not restricted to your local network). So anyone that can get to > port 8000 on your machine can proxy to any other public website. Now, I'd > guess that you also run a NAT router so this may not actually be opening up > an open proxy for the world to access, but it seems a little bit iffy to > put into a general guide. > > John > =:-> > >
-- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
