# Security

**URL:** <https://www.ruby-forum.com/t/security/154348>\
**Category:** Mongrel\
**Created:** [November 28, 2008, 4:19am UTC](https://www.ruby-forum.com/t/security/154348 "2008-11-28T04:19:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sebastian\_Hennebrue](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/43a26b/32.png) [@Sebastian\_Hennebrue](https://www.ruby-forum.com/u/Sebastian_Hennebrue)\
**Post date:** [November 28, 2008, 4:19am UTC](https://www.ruby-forum.com/t/security/154348/1 "2008-11-28T04:19:27Z")

</div>

Hello,

I just setup my first mongrel server behind a apache proxy. I recognized  
that a lot of explanation in the wiki and on other external pages  
configure mod\_proxy to connect to a localhost but simple do not  
configure mongrel to listen only on localhost as well. This leads easily  
to security issues for unexperienced administrators.  
sample doc: [http://mongrel.rubyforge.org/wiki/Apache](http://mongrel.rubyforge.org/wiki/Apache)

My proposal is that for the mod\_proxy examples the listening IP is  
always added. This might encourage to use a local port as default  
configuration.

Best Regards

Sebastian Hennebrueder  
[http://www.laliluna.de](http://www.laliluna.de)