[PLUG] Limit unifi to specific IP address...

[michael at robinson-west.com]

A gateway has multiple interfaces connecting to different networks typically. The unifi package for configuring Unifi AC AP LR from a Debian host binds to all addresses by default.

I don't want the web interface for unifi on my Internet facing IP address, but there's no way to limit it directly.

root at filter:/etc/X11/Xsession.d# netstat -nlpt | grep java
tcp 0 0 0.0.0.0:8843 0.0.0.0:* LISTEN 8721/java 
tcp 0 0 0.0.0.0:8880 0.0.0.0:* LISTEN 8721/java 
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 8721/java 
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN 8721/java 
tcp 0 0 0.0.0.0:6789 0.0.0.0:* LISTEN 8721/java 
root at filter:/etc/X11/Xsession.d#

There is absolutely no reason to be bound like this, my local network is 192.168.254.0/24 and these services should be
bound to 192.168/254.1.

Another question not related, how do I block remote access to X Windows short of uninstalling it?