From owner-freebsd-security  Thu May  2  4:19:22 2002
Delivered-To: freebsd-security@freebsd.org
Received: from daemonz.org (TK212017094177.teleweb.at [212.17.94.177])
	by hub.freebsd.org (Postfix) with SMTP id 7B96937B400
	for <freebsd-security@FreeBSD.ORG>; Thu,  2 May 2002 04:19:16 -0700 (PDT)
Received: (qmail 57415 invoked by uid 1001); 2 May 2002 11:23:30 -0000
Date: Thu, 2 May 2002 13:23:30 +0200
From: Stanislav Grozev <tacho@factline.com>
To: Mario Pranjic <mario.pranjic@irb.hr>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: sslwrap and imap
Message-ID: <20020502112330.GB56220@meerkat.dungeon>
References: <Pine.GSO.4.32.0205021249220.566-100000@nippur.irb.hr>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="x+6KMIRAuhnl3hBn"
Content-Disposition: inline
In-Reply-To: <Pine.GSO.4.32.0205021249220.566-100000@nippur.irb.hr>
User-Agent: Mutt/1.3.28i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, May 02, 2002 at 12:49:53PM +0200, Mario Pranjic wrote:
<snip/>
> > > imaps   stream  tcp     nowait  root    /usr/local/sbin/tcpd
> > > /usr/sbin/sslwrap       -cert   /usr/local/ssl/certs/server.pem
> > > -exec   /usr/local/sbin/imapd
> >
> That's the problem. FreeBSD doesn't have tcpd as a separate binary which I
> can run. So, I don't really know what to put there instead.
> Any idea?

you do not need it - freebsd'w inetd, when started with -w (which is the
default) supports tcp wrappers by itself. so, remove the /usr/local/sbin/tc=
pd
from above, adjust your /etc/hosts.allow, kill -HUP `cat /var/run/inetd.pid`
and you should be set.

-tacho
--=20
[a lie is my shield] | [http://daemonz.org/ || tacho@daemonz.org]
0x44fc3339 || [02b5 798b 4bd1 97fb f8db 72e4 dca4 be03 44fc 3339]

--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE80SGy3KS+A0T8MzkRAjDeAJ9UfN9BAydhkb0LwAI2Us0Vq9Xo5wCfcJap
B2RwbVK274qqzspg7g/8wmo=
=Gk1Z
-----END PGP SIGNATURE-----

--x+6KMIRAuhnl3hBn--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message