Subj : Another change
To   : Tommi Koivula
From : Nicholas Boel
Date : Sun Mar 17 2024 09:11:44

On Sun, 17 Mar 2024 14:07:14 +0200, Tommi Koivula -> Jay Harris wrote:

 TK> Hi Jay.

 TK> 16 Mar 24 14:18, you wrote to Nicholas Boel:

  JH>> Changing the line to ::ffff:127.0.0.1 didn't seem to help,
 TK> changing it to
  JH>> *127.0.0.1 seemed to do the trick.

 TK> Good to know! I've been running the ipv6-patched version for years, but
 TK> never limited the access via the .allow file. "*" there only. :)

From smapinntpd.allow:

# "*" can be used as a wildcard. Everything after "*" is ignored, i. e.
# 127.0.*.1 is equivalent to 127.0.*. Just write "*" alone on a line to
# allow all IP numbbers.

This means *127.0.0.1 = *

Which is exactly what you're doing already.

127.0.0.1 is probably just a placeholder for the host machine itself, so that you're not allowing traffic from the outside world without knowledge of it if/when one tries starting smapinntpd up for the first time without specifics.

You can always try limiting actual IP addresses in that file (and by all means, try actual IPv6 addresses to see if they work).

Regards,
Nick

.... "Take my advice, I don't use it anyway."
--- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Thunderb
 * Origin: _thePharcyde distribution system (Wisconsin) (1:154/10)

.