By default, the proxy listens on 127.0.0.1
If you make it listen on any other interface, you should (OK, must) add an authentication filter, so as not to become an open proxy