Recommended Free Tools
Bind Apache to explicit loopback listeners—127.0.0.1 for IPv4 and, when needed, [::1] for IPv6—and set MySQL’s bind_address=127.0.0.1 in the [mysqld] group. Remove wildcard listeners such as Listen 80, restart both services, and verify the actual sockets. If no program needs MySQL TCP/IP, skip_networking removes that transport entirely.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What “localhost only” actually means
A service is local-only when its listening socket is attached to a loopback address instead of every network interface. IPv4 loopback is 127.0.0.1; IPv6 loopback is ::1. Connections arriving through an Ethernet, Wi-Fi, VPN, or other host address cannot reach a process that has no socket on that interface.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Apache and MySQL enforce this independently. Changing Apache’s listener does not change MySQL, and changing MySQL does not change Apache. Configure each daemon, restart it, and inspect the resulting sockets rather than relying on a successful local browser or database connection.
Loopback binding is a service-level control, not a replacement for a firewall. A firewall can still allow, reject, or silently drop traffic, while a loopback-only service rejects remote TCP connections before application authentication is involved.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Prepare before editing either service
First list the ports your stack actually uses. Apache commonly has separate HTTP and HTTPS listeners, while MySQL commonly uses TCP port 3306, although either service may be configured on another port. Record the current listener output so you can compare it after the change.
- Identify the active Apache configuration and any files it includes; editing an unused file has no effect.
- Identify the active MySQL option file and place server options in the
[mysqld]group. - Decide whether local applications require TCP host-and-port connections or can use a Unix socket, named pipe, or shared memory.
- Check whether local clients use IPv4, IPv6, or both before choosing the Apache listener set.
- Plan a restart through the operating system’s service manager because both Apache listener changes and MySQL
bind_addressare startup-sensitive.
Keep a copy of the original directives or otherwise record them before changing anything. This makes it possible to restore a known working state if a virtual-host address, client connection method, or startup check exposes a compatibility issue.
Bind Apache HTTP Server to loopback
Use address-qualified Listen directives
Apache’s Listen directive determines the local addresses and ports on which httpd creates listening sockets. If only a port number is specified, Apache listens on that port on all interfaces. Replace wildcard-only directives with explicit loopback addresses in the active server configuration:
# IPv4 HTTP
Listen 127.0.0.1:80
# Optional IPv6 HTTP
Listen [::1]:80Use the same pattern for TLS if the local site serves HTTPS:
# IPv4 HTTPS
Listen 127.0.0.1:443 https
# Optional IPv6 HTTPS
Listen [::1]:443 httpsThe https protocol token belongs on configurations that use it for the TLS listener. Keep each port and protocol consistent with the virtual-host declarations used by the site.
Remove wildcard and duplicate listeners
Delete or comment out directives that would reopen the service on all interfaces, including Listen 80, Listen 443, and Listen 0.0.0.0:80. An unintended wildcard IPv6 listener must also be removed. Leaving both a wildcard and a loopback line can expose the port despite the loopback line.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Do not add overlapping Listen entries casually. Apache documents that overlapping listeners can produce a fatal “Address already in use” startup error. If the service refuses to start after an edit, inspect every included configuration file for a second directive using the same address and port.
Understand the difference between Listen and VirtualHost
Listen controls whether httpd accepts a socket at all. A <VirtualHost> block controls request routing after a connection has been accepted. A virtual host declared for an external address cannot be reached if httpd is not listening on that address; conversely, a virtual host does not turn a loopback listener into an external listener.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Review virtual-host declarations after changing listeners so their address and port combinations match the sockets you intend to keep. A site that should be local can use loopback-addressed virtual hosts, while name-based routing can still select among local sites on the same loopback port.
Apply and verify the Apache change
- Edit the configuration file that the running Apache instance actually loads. If the installation includes files from a main configuration, verify that the edited file is included.
- Run the configuration check supplied by your operating system or Apache installation. Correct syntax and duplicate-listener errors before attempting a restart.
- Restart or reload httpd through the service manager. A reload is sufficient only if the manager and platform apply listener changes during reload; use a full restart when in doubt.
- Inspect listening TCP sockets:
ss -ltnp | grep -E ':(80|443)b'
# or
lsof -nP -iTCP:80 -sTCP:LISTENFor an IPv4-only setup, the output should show 127.0.0.1:80 and, if configured, 127.0.0.1:443. A dual-stack loopback setup should additionally show [::1]:80 and [::1]:443. It should not show 0.0.0.0:80, an external host address, or an unintended wildcard IPv6 socket.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsChoose IPv4-only or dual-stack loopback for Apache
| Configuration | Listeners | When it fits | What to verify |
|---|---|---|---|
| IPv4 loopback | 127.0.0.1:80 (and optionally 127.0.0.1:443) |
All local clients use IPv4 or explicitly connect to 127.0.0.1. |
No wildcard IPv4 or IPv6 socket remains. |
| Dual-stack loopback | 127.0.0.1 plus [::1] for each required port |
Local clients may resolve a name to IPv6 and need to reach the site through ::1. |
Inspect IPv4 and IPv6 sockets independently and test both addresses. |
An IPv4 loopback directive does not automatically create an IPv6 ::1 listener. Add the IPv6 line deliberately and test it separately. Conversely, adding IPv6 does not make an IPv4-only client use IPv6.
When a local hostname resolves to both address families, a client may try IPv6 first. If only 127.0.0.1 is configured, that client can appear to fail even though IPv4 works. Either configure the client to use IPv4 explicitly or add the matching [::1] listener and verify it independently.
Bind MySQL to the local machine
Keep TCP/IP but restrict it to IPv4 loopback
In the [mysqld] option group, set:
bind_address=127.0.0.1MySQL 8.4 documentation defines bind_address as a startup setting that controls the TCP/IP addresses accepted by the server. With 127.0.0.1, mysqld listens for TCP/IP only on the IPv4 loopback interface and does not accept remote TCP connections. The classic MySQL TCP port is normally 3306, although an installation can choose another port.
After saving the option, restart mysqld with the operating system’s service manager. A running process does not adopt this startup setting merely because the file changed. If startup fails with a bind error, another process may own the requested port or another active option may request an overlapping address.
Verify the MySQL TCP socket
ss -ltnp | grep 3306
# or
lsof -nP -iTCP:3306 -sTCP:LISTENSubstitute the configured port if it is not 3306. The expected IPv4 result is 127.0.0.1:3306 (or the selected port), not 0.0.0.0:3306 and not an external host address. If local applications require IPv6 TCP, configure an IPv6 loopback address according to the MySQL version and deployment policy, then verify that listener independently; do not infer an ::1 socket from an IPv4 setting.
Disable MySQL TCP/IP completely when possible
If every client can use a local IPC mechanism, add this to [mysqld]:
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
skip_networkingskip_networking disables TCP/IP rather than merely narrowing its address. Unix clients must use the MySQL Unix socket. Windows clients can use named pipes or shared memory where those transports are enabled and supported by the client. This is the strongest local-only choice, but it breaks applications configured only with a host-and-port connection string.
| MySQL setting | Transport available | Compatibility consequence | Use it when |
|---|---|---|---|
bind_address=127.0.0.1 |
TCP/IP on IPv4 loopback; local socket availability is unchanged. | Applications using 127.0.0.1 and a port continue to work. |
A local application expects TCP/IP, or different clients use mixed connection methods. |
skip_networking |
No TCP/IP listener. | Clients must use a Unix socket, named pipe, or shared memory; TCP host-and-port settings fail. | No application needs TCP/IP and all clients can be configured for local IPC. |
Choose one approach based on the clients, not only on the desired security posture. A local web application using a TCP connection string will continue to work with loopback binding but needs a socket path and matching client settings if TCP/IP is disabled.
Test the transport you actually intend to secure
Do not let localhost hide a TCP error
On Unix systems, the MySQL command-line client commonly interprets --host=localhost as a request to use a Unix socket. A successful command using that host value therefore does not prove that the TCP listener is bound correctly.
Force an IPv4 TCP connection with:
mysql --host=127.0.0.1 --protocol=TCP -u app_user -pThis test exercises the same TCP path used by an application configured for host 127.0.0.1 and the MySQL port. Test the Unix-socket path separately if you selected skip_networking. On a dual-stack deployment, use an IPv6 loopback address supported by the client and verify that it reaches the intended listener.
Use both local and remote test points
- From the server, connect to Apache at
127.0.0.1and, if configured,::1. Test the HTTP and HTTPS ports separately. - From the server, run the explicit MySQL TCP command above, then test the socket or named-pipe connection required by your application.
- From another machine on the network, attempt the server’s normal hostname or external address. A correctly loopback-bound service should not accept the connection.
- Inspect listeners again after every restart so you know which process owns each port.
A remote client’s timeout, refusal, or firewall error is not itself proof of the binding. The authoritative check is that the service process has no listener on an external or wildcard address.
Read listener output correctly
Check each service and address family separately. For Apache, inspect every HTTP and HTTPS port; for MySQL, inspect the configured database port rather than assuming 3306. A process can have the expected IPv4 loopback socket while a second process, included configuration, or IPv6 wildcard socket exposes the same service elsewhere.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Observed endpoint | Meaning | Action |
|---|---|---|
127.0.0.1:port |
IPv4 loopback only for that socket. | Keep it if IPv4 local clients are required. |
[::1]:port |
IPv6 loopback only for that socket. | Keep it when local IPv6 clients are required. |
0.0.0.0:port |
IPv4 wildcard; all local IPv4 interfaces may accept connections. | Find and remove the wildcard directive or option. |
[::]:port |
IPv6 wildcard; interfaces may be reachable through IPv6. | Replace it with [::1] or remove IPv6 listening. |
| External host address | A specific non-loopback interface is listening. | Correct the service configuration and restart it. |
Why a remote connection may still succeed
A wildcard directive remains active
Search all Apache configuration files loaded by the running instance for port-only or wildcard Listen lines. An included file can recreate Listen 80 even when the main file contains Listen 127.0.0.1:80. Apply the same review to HTTPS and to wildcard IPv6 listeners.
The daemon was not restarted
Configuration files describe the next process start; they do not necessarily alter an already-open socket. Confirm the service manager reports a successful restart and then inspect the process ID and listeners again.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Another process owns the port
If Apache or MySQL reports an address-in-use or bind failure, another instance or service may own the port. Use ss or lsof to identify the process, stop the unintended instance, and correct its configuration. Apache documents that overlapping listeners can prevent startup, and MySQL likewise cannot start when it cannot bind its requested address.
IPv6 was overlooked
A service can be restricted on IPv4 while remaining reachable through an IPv6 wildcard socket. Inspect both address families. If IPv6 is not needed, remove the IPv6 wildcard listener; if local IPv6 is needed, retain only [::1] for the required ports.
You tested a different service or port
Apache may be configured on a nonstandard HTTP or TLS port, and MySQL deployments may change the default 3306 port. Confirm the destination port and identify its owning process before changing settings.
The client used a different transport
A MySQL connection through a Unix socket can succeed even when TCP/IP is disabled or incorrectly bound. Conversely, an application configured for TCP can fail after skip_networking is enabled even though local socket clients continue to work. Match the test method to the application’s actual connection method.
How firewall rules fit into the design
Binding is the first boundary: the service socket exists only on loopback. Firewall policy is a second, independent boundary. A firewall can block a port even when a service listens externally, or report a blocked state while a loopback-only service is already rejecting remote connections. Use the listener inspection to establish the daemon’s actual exposure, then review firewall policy as defense in depth.
Do not “fix” an accidental wildcard listener only by hiding it behind a firewall. Correct the Apache or MySQL binding so an application restart cannot unexpectedly expose the port when firewall rules change or are disabled for troubleshooting.
Free tools Windows power users keep installed
One-click scans. No signup required.
Complete implementation checklist
- List the HTTP, HTTPS, and MySQL ports your local stack really uses.
- For Apache, replace port-only and wildcard
Listendirectives with loopback-specific IPv4 lines. Add matching[::1]lines only when local IPv6 is required. - Review included Apache configuration and virtual-host address/port combinations for conflicts.
- Run the Apache configuration check, then restart or reload through the service manager.
- For MySQL, place
bind_address=127.0.0.1in[mysqld], or chooseskip_networkingwhen every client supports local IPC. - Restart mysqld and confirm the effective listener with
ssorlsof. - Test Apache locally over each intended address family and test MySQL with
--host=127.0.0.1 --protocol=TCPwhen TCP is enabled. - From a separate machine, verify that external and wildcard addresses do not accept the service ports.
- Record the final listener output so a later package upgrade or configuration include can be detected quickly.
Expected final state
A local-only Apache deployment has only 127.0.0.1 and, if deliberately enabled, [::1] listeners for its HTTP and HTTPS ports. A local-only MySQL deployment either exposes TCP only on 127.0.0.1 or has no TCP listener because skip_networking is enabled. No wildcard, external-address, or unintended IPv6 listener remains, and both services have been restarted and verified after the configuration change.
Frequently Asked Questions
Does Listen 127.0.0.1:80 prevent LAN access to Apache?
Yes. Apache creates the HTTP socket only on the IPv4 loopback interface, so connections addressed to Ethernet, Wi-Fi, VPN, or other host addresses are not accepted by that listener. Check that no separate wildcard or external-address Listen directive remains.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Do I need an Apache [::1] listener?
Add Listen [::1]:80 (and the corresponding TLS line) only when local clients may use IPv6. An IPv4 loopback line does not create an IPv6 listener, so test both address families independently.
Why does MySQL work with localhost when TCP is misconfigured?
On Unix, the MySQL client commonly treats localhost as a Unix-socket request. Force the TCP path with mysql --host=127.0.0.1 --protocol=TCP to verify the loopback TCP listener.
Should I use bind_address=127.0.0.1 or skip_networking?
Use bind_address=127.0.0.1 when local applications need TCP/IP. Use skip_networking when every client can use a Unix socket, named pipe, or shared memory and you want no MySQL TCP listener at all.
Is changing the configuration file enough?
No. Apache listener changes and MySQL bind_address are applied by the running process at startup. Run the service’s configuration check where available, restart through the service manager, and inspect sockets afterward.
What causes Apache “Address already in use” after this change?
Overlapping Listen directives or another process using the same address and port can prevent Apache from starting. Inspect included configuration files and use ss or lsof to identify the owner.
Can a firewall replace loopback binding?
No. A firewall is a separate control. Correct binding keeps the service from creating an externally reachable socket, while firewall policy provides additional protection and may independently allow, reject, or drop traffic.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallHow can I prove that no external listener remains?
Inspect the actual process sockets with ss -ltnp or lsof -nP -iTCP:port -sTCP:LISTEN for every HTTP, HTTPS, and MySQL port. Acceptable endpoints are loopback addresses only; wildcard and external host addresses indicate further configuration work.
The Bottom Line
Use explicit loopback sockets, not port-only or wildcard listeners: Apache should listen on 127.0.0.1 and optionally [::1], while MySQL should use bind_address=127.0.0.1 or, when all clients support local IPC, skip_networking. Restart both daemons, test the intended transport, and verify every IPv4 and IPv6 socket.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
