[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #14 from Mark Martinec mark.marti...@ijs.si --- (In reply to comment #8) What would still be desired is: - provide round-robin scheduling in a select() to avoid one busy socket monopolizing the server Btw, this has now been taken care of by revision 1563172 (Bug 6996, 3.4.0). Spamd now randomly picks one of the ready sockets, in case there is more than one ready and we are using autonomous child processes (--round-robin). Not expected to be a very likely event, but better safe than sorry. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #13 from Mark Martinec mark.marti...@ijs.si --- trunk: related to Bug 6841: testing for PF_INET and PF_INET6 availability in spamd allows automatic choice of default protocol families for listen sockets (like on an IPv6-only host); documentation details; more informative debugging Sending spamd/spamd.raw Committed revision 1451230. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841
--- Comment #12 from Mark Martinec mark.marti...@ijs.si ---
trunk:
related to Bug 6841: decouple choosing a Socket vs. Socket6 module
from choosing an IO::Socket::{IP,INET6,INET} module,
improve compatibility with old versions of these modules
Sending lib/Mail/SpamAssassin/Util/DependencyInfo.pm
Sending spamd/spamd.raw
Committed revision 1450858.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 Mark Martinec mark.marti...@ijs.si changed: What|Removed |Added Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #11 from Mark Martinec mark.marti...@ijs.si --- Done, closing. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #9 from Mark Martinec mark.marti...@ijs.si --- Created attachment 5098 -- https://issues.apache.org/SpamAssassin/attachment.cgi?id=5098action=edit Enables spamd to listen on multiple sockets: IPv6 or IPv4 or Unix sockets The diff is in the attachment. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #7 from Mark Martinec mark.marti...@ijs.si --- Really the thing that is needed for these issue is to change programs that have a 'one socket' concept into a list of sockets, and then it's easy. Getting there, brace yourself for a hefty change to internals in spamd ... -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 Greg Troxel g...@ir.bbn.com changed: What|Removed |Added CC||g...@ir.bbn.com --- Comment #3 from Greg Troxel g...@ir.bbn.com --- I checked an apache server that listens on both v4 and v6 and the config file has Listen 0.0.0.0:80 Listen [::]:80 So I don't follow single bind. (I suspect that on systems that have v6only set to 0, listening on [::] will result in handling v4 connections as mapped addresses.) -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #4 from Kevin A. McGrail kmcgr...@pccc.com --- Good comment on listserv from John Wilcock: The documentation for apache's Listen directive is actually very helpful in explaining the situation with regard to IPv4-mapped IPv6 addresses and BSD's different default. http://httpd.apache.org/docs/2.2/en/bind.html#ipv6 -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 --- Comment #5 from Dan Mahoney sab...@gushi.org --- Greg, on the other hand, on my machine (FreeBSD by the way), with apache: %cd /usr/local/etc/apache22 %grep -Ri listen * httpd-webmail.conf:Listen 149.20.61.46:80 httpd-webmail.conf:Listen 149.20.61.46:443 httpd.conf:# Listen: Allows you to bind Apache to specific IP addresses and/or httpd.conf:# Change this to Listen on specific IP addresses as shown below to httpd.conf:#Listen 12.34.56.78:80 httpd.conf:Listen 80 vhost.conf:#Listen 8090 vhost.conf:listen [2001:470:1f07:8d8:9746:1ac4:a56d:b20c]:80 vhost.conf.original:Listen 8090 %netstat -na|grep LIST tcp4 0 0 149.20.61.46.443 *.*LISTEN tcp4 0 0 149.20.61.46.80*.*LISTEN tcp6 0 0 2001:470:1f07:8d.80*.*LISTEN tcp46 0 0 *.80 *.*LISTEN prime# sysctl -a|grep -i v6only net.inet6.ip6.v6only: 1 While I wouldn't argue that this may be different on different OSes, I seem to think that apache's doing the right thing (I specified listen 80, without specifying an address family, and it listened on v4 and v6), despite the v6only setting above. I'm not trying to argue that all these things should be the same or that the apache way is the One True Way, mind you -- just trying to point out that it's actually possible, despite what I think has been previously said. If anyone wants a shell to see how apache was built, whatnot, let me know. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 Kevin A. McGrail kmcgr...@pccc.com changed: What|Removed |Added CC||kmcgr...@pccc.com --- Comment #1 from Kevin A. McGrail kmcgr...@pccc.com --- As noted on the mailing list, this issue might be OS specific. Per DFS: I think this is a FreeBSDism. On Linux, something listening on :: will answer both IPv4 and IPv6 connection attempts. Maybe FreeBSD has a way to emulate that? And continued with Greg Toxel: It's not quite right to call that a FreeBSDism; it's much messier than that. IPv6 supports a concept called mapped addresses, where v4 addresses can be represented in v6 addresses. A system can be configured to have sockets that listen on :: also listen on INADDR_ANY and present the v4 addresses as mapped v6 addresses. This feature is somewhat controversial, because of security concerns (if the program didn't open a v4 socket, why is it possible to connect to it over the net via v4?): http://en.wikipedia.org/wiki/IPv4_mapped_address#IPv4-mapped_IPv6_addresses On NetBSD, the default is that v6 sockets are only v6 (via sysctl): net.inet6.ip6.v6only = 1, and I believe OpenBSD and FreeBSD are the same way. See http://tools.ietf.org/html/rfc3493 http://tools.ietf.org/html/rfc3542#section-13 So I suspect that on Linux, v6only defaults to off (while on *BSD it defaults to on). Apparently on some systems it's always off because the stacks are separate IMHO, portable software should have two sockets, one on INADDR_ANY and one on IN6ADDR_ANY. But, setting the socket option may be a workaround. It's certainly wrong to assume that an OS has a particular default. -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 Kevin A. McGrail kmcgr...@pccc.com changed: What|Removed |Added Target Milestone|Undefined |3.4.0 Severity|normal |blocker -- You are receiving this mail because: You are the assignee for the bug.
[Bug 6841] Spamd cannot listen to more than one IP address (or to v4/v6 at the same time)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6841 Dan Mahoney sab...@gushi.org changed: What|Removed |Added CC||sab...@gushi.org --- Comment #2 from Dan Mahoney sab...@gushi.org --- It's worth it to note here that proftpd and apache manage to do it with a single bind. I should also ask how difficult it would be to solve this by simply making the -i option work multiple times, as opposed to fixing the socket semantics? I don't know the internal locking/queueing well enough to know if that's an easier answer. -Dan -- You are receiving this mail because: You are the assignee for the bug.
