Sphinx listen on localhost only

To restrict the search daemon sphinx on running on any interface, change the line within your config (i.e. /opt/kaltura/app/configurations/sphinx/kaltura.conf) to something like:

searchd
{
        log = /opt/kaltura/log/sphinx/kaltura_sphinx_searchd.log
        query_log = /opt/kaltura/log/sphinx/kaltura_sphinx_query.log
        query_log_format = sphinxql
        read_timeout = 5
        max_children = 30
        pid_file = /opt/kaltura/sphinx/searchd.pid
        max_matches = 10000
        preopen_indexes = 0
        unlink_old = 1
        workers = threads
        binlog_path = /opt/kaltura/log/sphinx/data
        binlog_flush = 1
        rt_flush_period = 3600
        listen = 127.0.0.1:9312:mysql41
}

The last line listen is important. If it takes only zeros you listen to the whole world!