[gentoo-dev] Split tcpserver rules for qmail SMTP/POP?

[Robert Coie]

I am wondering if my situation is common enough to warrant making the
default qmail installation process more complicated internally.  I
want incoming SMTP connections to be allowed from anywhere, but users
should only be able to read mail via POP from within a smaller subset
of hosts.

As it is, it seems to me that the stock qmail package is using
/etc/tcp.smtp.cdb for running both qmail-smtpd and qmail-pop3d.  It
would help me if this were split into two separate files, say
/etc/tcp.smtp.cdb and /etc/tcp.pop3.cdb.  The default installation
could have identical contents in each, but it would then be easy for
users in my situation to lock the POP daemon down without affecting
the SMTP daemon as well.

Of course, it's always possible to just use iptables instead of
tcpserver, but it would be nice to be able to use the tcpserver
functionality as well.

I would be willing to make a tentative patch to the ebuild if there is
sufficient interest and agreement that this would be a net positive.
I have not filed a bugzilla bug, because it's a bit hard for me to
call this a bug with a straight face.

-- 
Robert Coie <rac@××××××××××.jp>
Implementor, Apropos Ltd.