James58899 says to YSITD
所以我說內部服務原本就應該只bind localhost,而不是再擋一層防火牆吧