spamd IPv6 listener 6.9amd64

[Martin]

Hi list,

I can't find in spamd(8) how to enable IPv6 listener in addition to IPv4 one.

Is it possible to set spamd(8) to listen on both IPv4 and IPv6?

Martin

[Patrick Wildt]

afaik spamd(8) does not support ipv6 (yet).
I also do not know if there is any ongoing effort for ipv6 to be added.

Post by Martin
Hi list,
I can't find in spamd(8) how to enable IPv6 listener in addition to IPv4 one.
Is it possible to set spamd(8) to listen on both IPv4 and IPv6?
Martin

I'm using rspamd, that's a pretty good application.

[Peter Nicolai Mathias Hansteen]

Post by Martin
Hi list,
I can't find in spamd(8) how to enable IPv6 listener in addition to IPv4 one.
Is it possible to set spamd(8) to listen on both IPv4 and IPv6?

Unfortunately spamd is IPv4 only.

Back in the day (2014ish?, about the time I was finishing up the 3rd ed of The Book of PF) there was talk of and possibly even an ambition of making it IPv6 capable. I remember discussing some of this with phessler at the time and left the descriptions in the book somewhat vague on the matter, hoping to get back to the issue soon. However I never saw code ready for testing.

I was under the impression that one of the hurdles to overcome was to define a sane version of greylisting to implement for IPv6 with its much larger set of addresses. But there could easily have been other issues that affected the effort.

So until other news on the matter turns up, it is better to rdr-to port spamd only for inet, not inet6.

All the best,
Peter


—
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

[Martin]

Hi Peter,

Great book of PF. I've read it early in 2015, very useful.

Since last updates all the incoming connections to my mail servers are IPv6, unfortunately. Just before the updates it was IPv4, so spamd has been used for all the incoming connections outside whitelists of known peers. Works like a charm.

Now I'm looking forward to exchange spamd to rspamd (it has DKIM signing functionality) to replace spamd and dkimproxy which working in current configuration.

Hope it can provide required functionality for IPv6 networks.

Martin

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

Post by Peter Nicolai Mathias Hansteen

Post by Martin
Hi list,
I can't find in spamd(8) how to enable IPv6 listener in addition to IPv4 one.
Is it possible to set spamd(8) to listen on both IPv4 and IPv6?

Unfortunately spamd is IPv4 only.
Back in the day (2014ish?, about the time I was finishing up the 3rd ed of The Book of PF) there was talk of and possibly even an ambition of making it IPv6 capable. I remember discussing some of this with phessler at the time and left the descriptions in the book somewhat vague on the matter, hoping to get back to the issue soon. However I never saw code ready for testing.
I was under the impression that one of the hurdles to overcome was to define a sane version of greylisting to implement for IPv6 with its much larger set of addresses. But there could easily have been other issues that affected the effort.
So until other news on the matter turns up, it is better to rdr-to port spamd only for inet, not inet6.
All the best,
Peter
—
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

[Craig Skinner]

Hi Martin,

I can't find in spamd(8) how to enable IPv6 listener ...

I thought there was an unofficial patch put up somewhere several years
ago, but I can't find it now. This is the nearest my searching got:

https://undeadly.org/cgi?action=article&sid=20131022072601

https://twitter.com/phessler/status/626312742367068160?lang=en

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223203



Not IpV6, but there is this well tested patch:
https://github.com/bdijkstra82/OpenBSD-spamlogd


Cheers,
Craig.