change to resolve 0.0.0.0:2017 security issue

[SaumyaBhushan]

https://github.com/v2rayA/v2rayA/issues/725

[cubercsl]

Some distribution like openwrt should still listen 0.0.0.0, so this is a breaking change and we should tell the maintainers make some changes in their packages before a tag release.

[SaumyaBhushan]

Right @cubercsl

[1715173329]

Some distribution like openwrt should still listen 0.0.0.0

It's the default behavior on openwrt. However, docker users might not that like this change.

[JamesMackerel]

default config value changed to 127.0.0.1 from 0.0.0.0, clean and good

[SaumyaBhushan]

@JamesMackerel . Is it ready to get merged or something else needs to be changed or discussed ?

[JamesMackerel]

I'm OK with it. Thank you!

[mzz2017]

I don't think it's a good idea to change it, because a lot of people use it with remote management, such as in routers and servers without a desktop environment.

There are MAYBE some vulnerabilities. However, we should also carefully consider usage scenafios.

[JamesMackerel]

I don't think it's a good idea to change it, because a lot of people use it with remote management, such as in routers and servers without a desktop environment.

This modification only changes the default config value, users are free to set the program to listen to 0.0.0.0 or any address if they want. I think the only thing we have to be care of is to mention this change in release note.

[SaumyaBhushan]

Hi @JamesMackerel @mzz2017 Any update on this PR?

[mzz2017]

@SaumyaBhushan Now you can set this in /etc/default/v2raya conveniently~