MongoDB Suggests that the easy way to handle security is to run it in a trusted environment, given that, "in such a configuration, one must be sure only trusted machines can access database TCP ports."
What would be the best approach for doing this? Is there a way for mongodb to natively only listen to localhost?
I'm using ubuntu 10.10
Add the following line into mongodb.conf
:
bind_ip = 127.0.0.1
As @Josh Rickard stated in comments: don't forget to restart the process after updating the config file:
service mongodb restart
As Andreas mentioned in a round-about way:
mongod --bind_ip 127.0.0.1
Note that although it didn't appear in the documentation last time I checked, you can also put this setting in the .conf file (vs. command line).
No setting = bind to all ips.
No one mentioned the location of the mongodb.conf
file which is /etc/mongodb.conf
. Double check before running the following commands.
echo "bind_ip = 127.0.0.1" >> /etc/mongodb.conf
service mongodb restart