From owner-freebsd-security@freebsd.org Wed Nov 11 17:00:07 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E6996A2C2B9; Wed, 11 Nov 2015 17:00:07 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mx1.sbone.de (mx1.sbone.de [IPv6:2a01:4f8:130:3ffc::401:25]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mx1.sbone.de", Issuer "SBone.DE" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9DFB51593; Wed, 11 Nov 2015 17:00:07 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:31::2013:587]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.sbone.de (Postfix) with ESMTPS id 2BCC625D389C; Wed, 11 Nov 2015 17:00:04 +0000 (UTC) Received: from content-filter.sbone.de (content-filter.sbone.de [IPv6:fde9:577b:c1a9:31::2013:2742]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPS id 61D40C770DC; Wed, 11 Nov 2015 17:00:03 +0000 (UTC) X-Virus-Scanned: amavisd-new at sbone.de Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:31::2013:587]) by content-filter.sbone.de (content-filter.sbone.de [fde9:577b:c1a9:31::2013:2742]) (amavisd-new, port 10024) with ESMTP id qNq7fqV-Ktla; Wed, 11 Nov 2015 17:00:01 +0000 (UTC) Received: from [IPv6:fde9:577b:c1a9:4420:cabc:c8ff:fe8b:4fe6] (orange-tun0-ula.sbone.de [IPv6:fde9:577b:c1a9:4420:cabc:c8ff:fe8b:4fe6]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPSA id 1E5A0C770BD; Wed, 11 Nov 2015 17:00:01 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) Subject: Re: OpenSSH HPN From: "Bjoern A. Zeeb" In-Reply-To: <56437296.9000709@FreeBSD.org> Date: Wed, 11 Nov 2015 17:00:00 +0000 Cc: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= , freebsd-current@freebsd.org, freebsd-security@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <774F6E78-54B0-44E2-AA4C-52E24CED2095@lists.zabbadoz.net> References: <86io5a9ome.fsf@desk.des.no> <56428E8A.3090201@FreeBSD.org> <56428F59.5010908@FreeBSD.org> <86y4e47uty.fsf@desk.des.no> <56436F4B.8050002@FreeBSD.org> <86r3jwfpiq.fsf@desk.des.no> <56437296.9000709@FreeBSD.org> To: Bryan Drewery X-Mailer: Apple Mail (2.2104) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Nov 2015 17:00:08 -0000 > On 11 Nov 2015, at 16:53 , Bryan Drewery wrote: >=20 > On 11/11/2015 8:51 AM, Dag-Erling Sm=C3=B8rgrav wrote: >> Bryan Drewery writes: >>> Another thing that I did with the port was restore the tcpwrapper >>> support that upstream removed. Again, if we decide it is not worth >>> keeping in base I will remove it as default in the port. >>=20 >> I want to keep tcpwrapper support - it is another reason why I still >> haven't upgraded OpenSSH, but to the best of my knowledge, it is far >> less intrusive than HPN. >>=20 >=20 > Yes, it's very small. > /usr/ports/security/openssh-portable/files/extra-patch-tcpwrappers And thanks to both of you for keeping it. It=E2=80=99s often the best you can get if you have machines which run = w/o firewalls. Just wanted to say =E2=80=9Cthanks=E2=80=9D! /bz=