On 07/23/10 19:55, Jeremy Kiffiak wrote:
Hey Matto,

I am fairly new to SOGo myself but will give this my best shot! :-)

I am unaware of a WOIPaddress option (or something similar) but there is
"WOHtppAllowHost" which by default is set to "localhost" (I have
explicitly set this in my ".GNUstepDefaults" just to be sure).

Thanks for the suggestion.

However, that parameter does not appear to have any effect on my system.
I tried setting it alternately to "localhost" and "127.0.0.1" (from being
unset/unspecified before).  In both cases, after a restart the sogod process
was still listening on 0.0.0.0 (i.e., all interfaces), and would still happily
try to service requests from a remote laptop (i.e. pointed at the URL
"http://my.server.com:20000/";).

A sample GNUstep/Defaults/.GNUstepDefaults snippet:

{
    sogod = {
        ...
        WOHttpAllowHost = 127.0.0.1;
    };
}

("WOHtppAllowHost" didn't do anything either. :)

SOGo itself cannot be accessed directly due to the "limitations" of SOPE
which doesn't have a built-in web-server (and thus the need for the
Apache reverse proxy). This isn't exactly what you are looking for but I
believe it ends up having the same affect.

SOGo itself cannot be accessed directly *usefully* --- yet it still exposes
its half-baked HTTP implementation to the outside world.  The default setup
should not allow this at all.

-m


Anyways, hopefully I didn't lead you down the wrong path... :-D

Jeremy



On 24-Jul-10, at 8:03 AM, Matto Marjanovic wrote:

Hi,

Is there a config option to specify which net interfaces sogod binds to?
This would be the analog to WOPort, for IP address instead of port
number.

The use case I have is to tell sogod to listen on localhost only.
In a simple setup with apache and sogod on the same host, there is
typically no good reason for sogod to accept connections from anywhere
else.

-m
--
[email protected]
https://inverse.ca/sogo/lists


-- 
[email protected]
https://inverse.ca/sogo/lists

Reply via email to