修复现网漏洞扫描结果项：ZooKeeper 未授权访问[原理扫描]

项目场景：

某主机漏扫后，有高危风险项需要修复：ZooKeeper 未授权访问[原理扫描]

问题描述

现网zookeeper是kafka自带的，版本号2.8.1 (Commit:839b886f9b732b15)

解决方案：

使用最简单的处理方案，端口加白。
CentOS7.9下，修改/etc/firewalld/zones/public.xml文件，内容为：

<?xml version="1.0" encoding="utf-8"?> <zone>   <short>Public</short>   <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>   <service name="ssh"/>   <service name="dhcpv6-client"/>   <port protocol="tcp" port="9092"/>   <port protocol="tcp" port="22"/>   <port protocol="tcp" port="443"/> </zone>  

然后systemctl restart firewalld即可。