Hi, 

I am using spamd and told it to listen only on the local interface:

[EMAIL PROTECTED]:~$ ps aux|grep spamd
root      1764  0.0  3.0 34456 30672 ?       SNs  Jun01   0:00 /usr/bin/perl -T
-w /usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir 
--syslog=/var/log/spamd.log -q --debug --listen-ip=127.0.0.1 -d 
--pidfile=/var/run/spamd.pid

A look on netstat shows, that this is indeed correct:

tcp        0      0 127.0.0.1:783           0.0.0.0:* LISTEN     1764/perl


But when spamc spawns some children when actually scanning a message those 
listen on the whole internet:

tcp        0      0 localhost:spamd         *:*                     LISTEN     
1764/perl           
tcp        0      0 localhost:spamd         localhost:42346         CLOSE_WAIT 
10608/spamd child   
tcp        0      0 localhost:42346         localhost:spamd         FIN_WAIT2  
10689/spamc         
tcp        0      0 localhost:42336         localhost:spamd         TIME_WAIT  
-                   
tcp        0      0 localhost:42341         localhost:spamd         TIME_WAIT  
-                   
udp      368      0 *:34591                 *:*                                
10608/spamd child   
udp      368      0 *:34592                 *:*                                
10608/spamd child   
udp      368      0 *:34593                 *:*                                
10608/spamd child   
udp      368      0 *:34594                 *:*                                
10608/spamd child   
udp      368      0 *:34595                 *:*                                
10608/spamd child   
udp      368      0 *:34596                 *:*                                
10608/spamd child   
udp      368      0 *:34597                 *:*                                
10608/spamd child   
udp      368      0 *:34598                 *:*                                
10608/spamd child   
udp      368      0 *:34599                 *:*                                
10608/spamd child   
udp      368      0 *:34600                 *:*                                
10608/spamd child   
udp      368      0 *:34601                 *:*                                
10608/spamd child   
udp      368      0 *:34602                 *:*                                
10608/spamd child   
udp      368      0 *:34603                 *:*                                
10608/spamd child   
udp      368      0 *:34604                 *:*                                
10608/spamd child   

What does that mean? All udp connections listen on the whole internet. Is this 
a bug? Have I configured spamd incorrectly? 

Any hints are appreciated.

Regards
Marco

Reply via email to