Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Jun 1999 18:18:34 -0400 (EDT)
From:      John Baldwin <jobaldwi@vt.edu>
To:        Sheldon Hearn <sheldonh@uunet.co.za>
Cc:        David Malone <dwmalone@maths.tcd.ie>, freebsd-hackers@freebsd.org
Subject:   Re: Inetd and wrapping.
Message-ID:  <199906222218.SAA22760@smtp4.erols.com>
In-Reply-To: <92810.930049763@axl.noc.iafrica.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On 22-Jun-99 Sheldon Hearn wrote:
> 
> 
> On Tue, 22 Jun 1999 07:04:29 -0400, John Baldwin wrote:
> 
>> Because that only controls access, it does not actually turn wrapping off.
> 
> Let me be more specific; if you don't want ftpd wrapped, just add
> 
> ftpd: ALL : ALLOW

That still wraps, it just allows everyone in.

> to your /etc/hosts.allow . A stock configuration won't log successful
> connections, so you won't see any logging at all.

But if I want to log *all* connections to service foo, but not bar, I could not
use tcpd for foo and and bar by itself and achieve that, so you are removing
some configurability.  If very few people use this extra configurability and if
it is a pain to add it in, then I guess it's no real big deal.

> Asking for command-line switches and/or inetd.conf directives that allow
> per-case exclusions seems to me like asking for duplicate functionality
> that isn't required (or is that tautology? :-).

Actually, it's asking for functionality that exists with TCP wrappers, but not
with the integrated inetd.  Like I said, though, if no one but me is going to
miss it, and it is non-trivial to implement, then don't bother.  OTOH, if it is
trivial to implement, then why remove functionality?

> Ciao,
> Sheldon.

---

John Baldwin <jobaldwi@vt.edu> -- http://members.freedomnet.com/~jbaldwin/
PGP Key: http://members.freedomnet.com/~jbaldwin/pgpkey.asc
"Power Users Use the Power to Serve!"  -  http://www.freebsd.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199906222218.SAA22760>