How can Dovecot be configured to bind IMAPS listeners only to specific internal addresses to prevent accidental public exposure?
In a typical Dovecot installation, the IMAPS service listens on all available network interfaces (0.0.0.0:993 and [::]:993) unless explicitly restricted. When a server possesses multiple interfaces—such as a public NIC for web traffic and a private NIC for internal services—administrators risk exposing the IMAPS port to the Internet if the listener is not bo