On Sunday, June 28, 2015 04:35:39 PM Thomas Eckardt wrote:
> The reason can be found in
> http://man7.org/linux/man-pages/man7/ipv6.7.html
>
> IO::Socket::IP forces 1 for IPV6_V6ONLY, if any of AF_INET6 or PF_INET6 is
> defined for the socket domain/family and  IPV6_V6ONLY can be set (override
> the OS system default).
> IO::Socket::INET6 does not touch the IPV6_V6ONLY flag , which forces the
> usage of the OS level setting.

I think Perl decided to go with the former function in IO::Socket::IP for a 
reason. I am not sure IO::Socket::INET6 is used much these days as its 
supported in Perl. Not sure why IO::Socket::INET6 does things one way and 
IO::Socket::IP another, but one is officially in perl and the other is 3rd 
party.

> The overall recommendation is to use the system default - so
> IO::Socket::INET6 does nothing wrong.

True but still seems odd to use a module for something that is supported in 
Perl itself. That module was more for when perl's default did not support 
IPv6.

> Binding to the universal IPv6 [::] with disabled  IPV6_V6ONLY, enables
> IPv6 and IPv4 connection at this listener - binding IPv4 explicit to
> 0.0.0.0 to the same port after this, will fail.

Seems that was the issue, trying to bind to IPv4 and IPv6 wildcards. Doing 
just IPv6 works for both.

> The next release of assp V2 will take care of the system setting of
> IPV6_V6ONLY for security reasons. If this system flag is set to 1, nothing
> is changed. If this system flag is set to zero, assp will try to switch it
> to 1 for each defined universal IPv6 listener. How ever, a system can be
> build in a way, that does not allow to change this flag any way - so the
> system default will take place.

Seems with your change, you now have to set both. However for the SMTP Secure 
Listening Port, still seems to be the old way.

I have

SMTP Listen Port -> 0.0.0.0:25|0.0.0.0:2525|[::]:25|[::]:2525
Disable AUTH support on listenPorts  -> 0.0.0.0:2525|[::]:2525

Then I have this for the other

SMTP Secure Listen Port -> [::]:465|[::]:587

Kinda like the old way better, just specifying [::] vs 0.0.0.0|[::]. But I 
assume you will want to address the SMTP Secure Listen Port to be consistent 
with the others.

-- 
William L. Thomson Jr.
Obsidian-Studios, Inc.
http://www.obsidian-studios.com

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to