From 87333ba8297b930a0a69c445143631e93c55260f Mon Sep 17 00:00:00 2001
From: Matt Drollette <matt@drollette.com>
Date: Sat, 17 Mar 2018 21:49:10 -0500
Subject: [PATCH] config: bind naked ports to localhost

If only a port is given as a config value for a listener we'll
default to only binding that port to localhost.
---
 config.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/config.go b/config.go
index 6abfeaf8b..f6db498ba 100644
--- a/config.go
+++ b/config.go
@@ -1099,7 +1099,13 @@ func normalizeAddresses(addrs []string, defaultPort string) []string {
 	seen := map[string]struct{}{}
 	for _, addr := range addrs {
 		if _, _, err := net.SplitHostPort(addr); err != nil {
-			addr = net.JoinHostPort(addr, defaultPort)
+			// If the address is an integer, then we assume it is *only* a
+			// port and default to binding to that port on localhost
+			if _, err := strconv.Atoi(addr); err == nil {
+				addr = net.JoinHostPort("localhost", addr)
+			} else {
+				addr = net.JoinHostPort(addr, defaultPort)
+			}
 		}
 		if _, ok := seen[addr]; !ok {
 			result = append(result, addr)