@@ -24,14 +24,17 @@ Most of them are TCP ports, except the explicitely mentioned ones:
2424
2525## epmd
2626
27+ def: epmd
28+ : Small name server included in Erlang/OTP and used by Erlang
29+ programs when establishing distributed Erlang communications.
30+ See [ ` epmd (Erlang Port Mapper Daemon) ` ] ( https://www.erlang.org/doc/apps/erts/epmd_cmd.html )
31+
2732!!! tip
2833 If you setup ` ERL_DIST_PORT ` in ` ejabberdctl.cfg ` to a port number
2934 (for example ` 5210 ` ) then Erlang will listen only in that port,
3035 instead of starting the ` epmd ` program and listen in 4269 + ramdom port.
3136
32- [ ` epmd (Erlang Port Mapper Daemon) ` ] ( https://www.erlang.org/doc/apps/erts/epmd_cmd.html )
33- is a small name server included in Erlang/OTP and used by Erlang
34- programs when establishing distributed Erlang communications. ejabberd
37+ ejabberd
3538needs ` epmd ` to use ` ejabberdctl ` and also when clustering ejabberd
3639nodes. This small program is automatically started by Erlang, and is
3740never stopped. If ejabberd is stopped, and there aren't any other
@@ -74,7 +77,11 @@ erl ... -kernel inet_dist_use_interface "{127,0,0,1}"
7477
7578## Erlang Cookie
7679
77- The Erlang cookie is a string with numbers and letters. An Erlang node
80+ def: cookie
81+ : Random alphanumeric string assigned to each erlang [ ] ( def:node ) used to secure connections between erlang nodes.
82+ See [ Security in distributed erlang] ( https://www.erlang.org/doc/system/distributed#security ) .
83+
84+ An Erlang node
7885reads the cookie at startup from the command-line parameter
7986` -setcookie ` . If not indicated, the cookie is read from the file
8087` $HOME/.erlang.cookie ` .
@@ -110,7 +117,7 @@ different programs in the same machine.
110117Setting a secret cookie is a simple method to difficult unauthorized
111118access to your Erlang node. However, the cookie system is not ultimately
112119effective to prevent unauthorized access or intrusion to an Erlang node.
113- The communication between Erlang nodes are not encrypted, so the cookie
120+ The communication between Erlang nodes are not encrypted, so the [ ] ( def: cookie)
114121could be read sniffing the traffic on the network. The recommended way
115122to secure the Erlang node is to block the port 4369.
116123
@@ -125,7 +132,7 @@ Using the option `-sname` instead of `-name` is a simple method to
125132difficult unauthorized access to your Erlang node. However, it is not
126133ultimately effective to prevent access to the Erlang node, because it
127134may be possible to fake the fact that you are on another network using a
128- modified version of Erlang ` epmd ` . The recommended way to secure the
135+ modified version of Erlang [ ] ( def: epmd) . The recommended way to secure the
129136Erlang node is to block the port 4369.
130137
131138## Securing Sensitive Files
0 commit comments