为什么IntelliJ想要接受传入的网络连接？ [英] Why does IntelliJ want to accept incoming network connections?

问题描述

➠IntelliJ中的哪些功能充当接受传入连接的服务器？

首次运行IntelliJ 2017.1.1时，我收到一个对话框，询问是否允许传入网络连接。

您是否希望应用程序java接受传入的网络连接？

单击拒绝可能会限制应用程序的行为。可以在Security& ;;的防火墙窗格中更改此设置。隐私偏好。

[拒绝] [允许]

在新项目向导中全新安装IntelliJ 2017.2 Ultimate版本时出现的对话框示例，点击Maven标签时。

为什么IntelliJ会导致此提示？运行NetBeans时我没有遇到这样的事件。

拒绝或接受的确切影响是什么？我担心让Java进程接受外部网络连接，因为这样做会带来严重的安全风险。

可能与以下内容有关：

• 问题：

  解决方案

  可能它与以下内容相关联。

  
  
  

  如果您点击

  
  
  

  6942-6992范围内的开放端口似乎与 SocketLock.java

    myServer = BuiltInServer .startNioOrOio（workerCount，6942,50，false，handler）; 
    

  注意：端口 6953,6969,6970 被排除在该范围之外。参见 BuiltInServer.java

    private static final int [] FORBIDDEN_PORTS = {6953,6969,6970}; 
    

  另一个开放端口链接到进程 org.jetbrains.idea.maven .server.RemoteMavenServer

    jps -l | grep jetbrains 
   24628 org.jetbrains.idea.maven.server.RemoteMavenServer 
    

  你可以找到在Linux上使用 netstat

   打开端口：`netstat -ltupne` OSX上的
  （类似）：nettop -np java 
    

  以及相关的java进程 jps （如上所示）

  
  

  ➠ What feature in IntelliJ is acting as a server to accept incoming connections?

  When first running IntelliJ 2017.1.1 I get a dialog box asking permission for incoming network connections.

  Do you want the application "java" to accept incoming network connections?

  Clicking Deny may limit the application’s behavior. This setting can be changed in the Firewall pane of Security & Privacy preferences.

  [Deny] [Allow]

  Example of dialog appearing on a fresh install of IntelliJ 2017.2 Ultimate edition, in the New Project wizard, when clicking on the Maven tab.

  Why is IntelliJ causing this prompt? I got no such event when running NetBeans.

  What exactly is the effect of denying or accepting? I am concerned about letting a Java process accept outside network connections as doing so is a serious security risk.

  Possibly related to:

  • Question: How to bind IntelliJ IDEA random open ports to localhost only?
  • Issue IDEA-175889: IDE opens random ports on wildcard interface in some configurations

  ---

  This Question is not about the source of the message. The source is the Apple macOS app-level firewall. You can allow or block an app from listening for incoming network connections. Allowing this is a security risk.

  IntelliJ is asking to be added to the list of apps allowed to listen for incoming messages. My Question is, "Why does IntelliJ need to accept incoming network connections?".

  解决方案

  Problably it is linked to the below.

  If you click on http://localhost:63342/ you should be able to access the built-in server. Which by default should listen only on the local interface.

  Open port in range 6942-6992 seems to be linked to SocketLock.java

  myServer = BuiltInServer.startNioOrOio(workerCount, 6942, 50, false, handler);
  

  note: Ports 6953, 6969, 6970 are excluded from that range. See BuiltInServer.java

  private static final int[] FORBIDDEN_PORTS = {6953, 6969, 6970};
  

  Another open port is linked to a process org.jetbrains.idea.maven.server.RemoteMavenServer

  jps -l | grep jetbrains
  24628 org.jetbrains.idea.maven.server.RemoteMavenServer
  

  You could find out open port with netstat

  on Linux: `netstat -ltupne`
  on OSX (something like): nettop -np java
  

  and the related java processes with jps (as show above)

  这篇关于为什么IntelliJ想要接受传入的网络连接？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！