Disable external access to port 8080

Plone Support Administering Plone sites
1

I've installed zeo with the unified installer for 5.0.6.
My plone runs behind apache over https.

I wanted to remove http://mysite.tld:8080 from external visitors and only allow
http://localhost:8080.

I've found that I had to change parts/client1/etc/zope.conf by adding a line like
ip-address 127.0.0.1
which can easily be achieved though in buildout.cfg by writing something like this.

[client1]
<= client_base
recipe = plone.recipe.zope2instance
zeo-address = ${zeoserver:zeo-address}
http-address = 8080
ip-address = 127.0.0.1

Now, I've also tested to simply write

[client1]
<= client_base
recipe = plone.recipe.zope2instance
zeo-address = ${zeoserver:zeo-address}
http-address = 127.0.0.1:8080

After running buildout, the parts/client1/etc/zope.conf does not contain a ip-address line, but it seems that the result is actually the same.

Can someone explain the difference or give me a URL where it is explained what the suggested way is to allow only localhost:8080 but forbid mysite.tld:8080?

2

Install a firewall and filter the port.

If you want to bind to a different address:

ip-address
The default IP address on which Zope’s various server protocol implementations will listen for requests. If this is unset, Zope will listen on all IP addresses supported by the machine. This directive can be overridden on a per-server basis in the servers section. Defaults to not setting an ip-address.