From owner-freebsd-security  Tue Jan 23 19:40:56 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id TAA14729
          for security-outgoing; Tue, 23 Jan 1996 19:40:56 -0800 (PST)
Received: from haven.uniserve.com (haven.uniserve.com [198.53.215.121])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id TAA14713
          for <security@freebsd.org>; Tue, 23 Jan 1996 19:40:41 -0800 (PST)
Received: by haven.uniserve.com id <30754-3>; Tue, 23 Jan 1996 19:43:08 -0000
Date: 	Tue, 23 Jan 1996 19:42:57 -0800 (PST)
From: Tom Samplonius <tom@uniserve.com>
To: Nathan Lawson <nlawson@statler.csc.calpoly.edu>
cc: Paul Traina <pst@Shockwave.COM>, security@freebsd.org
Subject: Re: Ownership of files/tcp_wrappers port
In-Reply-To: <199601232006.MAA11043@statler.csc.calpoly.edu>
Message-ID: <Pine.BSF.3.91.960123193940.4975B-100000@haven.uniserve.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@freebsd.org
Precedence: bulk


On Tue, 23 Jan 1996, Nathan Lawson wrote:

> > Let me state, completely, my objections to adding the tcp wrapper code:
> > 
> > 	(a) there are several similar competing bits of code out there
> > 	    that do similar things -- wrappers is not the only way to go
> 
> I've only heard of xinetd, and Mike Neumann's binetd, but that's for SunOS
> only.  There are plenty of competing mailer packages besides sendmail, but
> sendmail comes installed by default.  Why?  Because it's the industry standard
> mailer.  Look on any system that uses any kind of access control and it's
> very likely that they are using tcp_wrappers.  Why?  Because it's smaller,
> easy to configure, and well-written.

  ...and slower.

> I think your arguments could be extended to say that "let's have sendmail be
> a port since many sites are not Internet or even UUCP connected.  It's easy
> to install if a user should desire it.  Besides, I have a firewall and use
> a custom package anyway, so it would save space on my system, as well as all
> the work to keep up-to-date (what with all the holes and security patches that
> sendmail has gone through)"

  Sendmail is included because it is standard BSD tool, and has always 
been included with BSD distributions since Sendmail was written. 

Tom