3 ms·
This is a combination problem poor default (listening to all interfaces?) and also IPv6 can be publicly accessible. It's a bit dependent on how this is configur
by FloatArtifact 8mo ago
This is a combination problem poor default (listening to all interfaces?) and also IPv6 can be publicly accessible. It's a bit dependent on how this is configured upstream by default, but this is a gotcha compared to IPv4.
- chrisjj 8mo agoThe article says no, the default is listening to just localhost. Given the instances in question have been deliberately configured to listen on public ports, calling this misconfiguration seems somewhat unjustified.
- crimsonnoodle58 8mo agoNot true for their docker instructions which specify -p 11434:11434 instead of -p 127.0.0.1:11434:11434. [1] Combine that with rootful docker's famous bypass of ufw and you have a publicly exposed ollama, even with a firewall. [2] [1] https://docs.ollama.com/docker https://docs.ollama.com/docker [2] https://github.com/moby/moby/issues/4737 https://github.com/moby/moby/issues/4737
- deleted 8mo ago[deleted]
- chrisjj 8mo agoOuch. Thanks.