[Nut-upsdev] Re: [nut-commits] svn commit r714 - in trunk: .

[Arjen de Korte]

>> Is there any point, besides Ip4/Ip6 support, to listen on an unlimited
>> number of sockets? You can create an unlimited number of connections
>> by listening on just one socket, right?
> Right, but if you have a firewall with multiple internal network
> interfaces, you might not want to bind to the external interface.

Indeed, that's the exactly what I meant.

> I got the impression that Arjen's idea of multiple sockets was to bind
> each socket to a different address (and soon, potentially different
> address families).

Spot on. The idea is to add a 'LISTEN' parameter to upsd.conf, where a
system administrator can specify on which addresses the server should
listen. For example

LISTEN 127.0.0.1
LISTEN 192.168.1.1
LISTEN ::1

Irrespective of whether IPv4/IPv6 is used, this is a valuable addition to
the server. In the present situation, the only option is to bind to one
specific interface or all interfaces. Access control is much easier/better
if you just bind to the interfaces on which you want to listen, so you
don't have to REJECT incoming connections on interfaces where you don't
intend to listen in the first place.

Best regards, Arjen