Control: tags -1 pending
Hi,
On 08:03 Tue 03 Nov , herrmann wrote:
> Source: dovecot
> Version: 1:2.2.13-12
> Severity: normal
>
> Dear Maintainer,
>
> *** Reporter, please consider answering these questions, where appropriate ***
>
> * What led up to the situation?
> dovecot shall listen on certain (here: loopback) interface only
>
> * What exactly did you do (or not do) that was effective (or
> ineffective)?
> created in /etc/dovecot/dovecot.conf a directive
> listen = 127.0.0.1
>
> (tested with more specific directives
> protocol imap {
> listen = 127.0.0.1:143
> ssl_listen = 127.0.0.1:993
> }
> too, same result)
>
> * What was the outcome of this action?
> After a restart of the service, dovecot listens as expected on localhost only.
> After a restart of the system, dovecot listens on all available interfaces
> Init: systemd (via /run/systemd/system)
This is because on boot under systemd dovecot is started by
dovecot.socket, which does not respect dovecot's IMAP listener
configuration and always binds the wildcard addresses. For this and
similar reasons, the upcoming 2.2.21 package will disable dovecot.socket
by default and rely only on dovecot.service.
You can manually disable dovecot.socket yourself, using systemctl
disable dovecot.socket; it is not required for dovecot's regular
operation.
Regards,
Apollon
