[2/6] cassandra git commit: State the obvious.

[br...@apache.org]

State the obvious.


Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo
Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/ce8501b7
Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/ce8501b7
Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/ce8501b7

Branch: refs/heads/cassandra-2.1
Commit: ce8501b77d3afa900d477855a0f1aa33bbe0a853
Parents: 08deff7
Author: Brandon Williams <br...@apache.org>
Authored: Tue Feb 10 11:48:59 2015 -0600
Committer: Brandon Williams <br...@apache.org>
Committed: Tue Feb 10 11:48:59 2015 -0600

----------------------------------------------------------------------
 conf/cassandra-env.sh | 1 +
 conf/cassandra.yaml   | 3 +++
 2 files changed, 4 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cassandra/blob/ce8501b7/conf/cassandra-env.sh
----------------------------------------------------------------------
diff --git a/conf/cassandra-env.sh b/conf/cassandra-env.sh
index 3544426..dfe8184 100644
--- a/conf/cassandra-env.sh
+++ b/conf/cassandra-env.sh
@@ -157,6 +157,7 @@ fi
 
 # Specifies the default port over which Cassandra will be available for
 # JMX connections.
+# For security reasons, you should not expose this port to the internet.  Firewall it if needed.
 JMX_PORT="7199"
 
 

http://git-wip-us.apache.org/repos/asf/cassandra/blob/ce8501b7/conf/cassandra.yaml
----------------------------------------------------------------------
diff --git a/conf/cassandra.yaml b/conf/cassandra.yaml
index 45290aa..99f13a6 100644
--- a/conf/cassandra.yaml
+++ b/conf/cassandra.yaml
@@ -318,6 +318,7 @@ listen_address: localhost
 # same as the rpc_address. The port however is different and specified below.
 start_native_transport: true
 # port for the CQL native transport to listen for clients on
+# For security reasons, you should not expose this port to the internet.  Firewall it if needed.
 native_transport_port: 9042
 # The maximum threads for handling requests when the native transport is used.
 # This is similar to rpc_max_threads though the default differs slightly (and
@@ -341,6 +342,8 @@ start_rpc: true
 # Note that unlike ListenAddress above, it is allowed to specify 0.0.0.0
 # here if you want to listen on all interfaces, but that will break clients 
 # that rely on node auto-discovery.
+#
+# For security reasons, you should not expose this port to the internet.  Firewall it if needed.
 rpc_address: localhost
 # port for Thrift to listen for clients on
 rpc_port: 9160