/etc/postfix/main.cf should use loopback-only not localhost

Originator:mackyle
Number:rdar://6822964 Date Originated:23-Apr-2009 06:28 PM
Status:Open Resolved:
Product:Mac OS X Product Version:10.5.6/9G55
Classification:Other Bug Reproducible:Always
 
23-Apr-2009 06:28 PM Kyle McKay:
DESCRIPTION:

Apple provides an adjusted postfix configuration file to increase security.

This file, /etc/postfix/main.cf, contains the line:

  inet_interfaces = localhost

which is intended to reduce exposure and improve security.  Unfortunately, that prevents postfix from offering both IPv4 and IPv6 connections on localhost.

Instead the following lines should be used:

  inet_protocols = all
  inet_interfaces = loopback-only

Which also only binds to the localhost loopback interface, but WILL provide both IPv4 AND IPv6 connections.

EXPECTATION:

The rest of Mac OS X is shipped pretty-much IPv6 enabled/ready.  The expectation is that postfix will ship with a similar IPv6 enabled/ready configuration and it currently does not.

WORKAROUND:

Manually edit the configuration file.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!