On Mon, 17 Oct 2005, OpenMacNews wrote:
>
> now, cyrus IS config'd/built "--with-libwrap", so i can use tcpwrappers
> to secure my OTHER cyrus services (imap, imaps, sieve, etc) which are
> running on TCPSockets ...
>
> QUESTION: why is a hosts.allow entry required in the 1st place for
> lmtpunix transport over a UNIXsocket?
>
> and, why "0.0.0.0"?
This looks like a Cyrus problem or a Mac OS X problem to me. The version
of Cyrus I have here (heavily hacked 2.1.16) looks like it won't call
tcpwrappers for Unix domain sockets. If the kernel lies to it and returns
the wrong kind of socket address from getpeername() then Cyrus will do the
wrong thing. I haven't tested Mac OS X to find out if this is the problem.
0.0.0.0 is a synonym for localhost.
Tony.
--
<fanf@???> <dot@???>
http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}