Question

I have a database application (or search engine) which is called Solr.

I connect to it via port 8983.

I do this from PHP code, so I add and remove records from it via php.

On my server I have a firewall.

I have set this firewall to only allow connections to and from this port (8983) from the ip address of my own server. In other words, only allow servers IP to access this port.

Is that safe? Or am I thinking all wrong here? Will others be able to “simulate” my ip address and act as the server?

This is because otherwise others may add/remove records as they want from their own IP addresses…

Thanks

Answer 1

It might be a good idea to also block all outgoing traffic from port 8983 on the server to anywhere but your own server’s IP address. This, in addition to dropping any packet to that port not from your server, will doubly ensure that, even if someone is somehow able to modify the daemon listening on port 8983 on the server, allowing it to mirror traffic to another host, it would be dropped before it leaves your computer.