From owner-freebsd-ports Wed Sep 10 14:29:40 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id OAA28313 for ports-outgoing; Wed, 10 Sep 1997 14:29:40 -0700 (PDT) Received: from gratis.grondar.za (gratis.grondar.za [196.7.18.133]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id OAA28307 for ; Wed, 10 Sep 1997 14:29:35 -0700 (PDT) Received: from greenpeace.grondar.za (greenpeace.grondar.za [196.7.18.132]) by gratis.grondar.za (8.8.7/8.8.7) with ESMTP id XAA29691; Wed, 10 Sep 1997 23:28:57 +0200 (SAT) Received: from greenpeace.grondar.za (localhost [127.0.0.1]) by greenpeace.grondar.za (8.8.7/8.8.7) with ESMTP id XAA01518; Wed, 10 Sep 1997 23:31:02 +0200 (SAT) Message-Id: <199709102131.XAA01518@greenpeace.grondar.za> X-Mailer: exmh version 2.0zeta 7/24/97 To: "Pedro Giffuni S," cc: Andreas Klemm , Mark Murray , ports@freebsd.org Subject: Re: Major bogon in tcp_wrappers port. Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 10 Sep 1997 23:31:02 +0200 From: Mark Murray Sender: owner-freebsd-ports@freebsd.org X-Loop: FreeBSD.org Precedence: bulk "Pedro Giffuni S," wrote: > > And ... which inetd related server programs do we want to > > protect, only some or all ? > > > IMO the only service that MUST have this control is SMTP (I run it in > inetd). I usually restrict access to the mailer from unknown hosts, > which is also a sane measure against spammers. Sendmail has the ability to use libwrap directly. (No /etc/inetd.conf involvement, so it is fast). SSH is the same. Other resident daemons can be converted with ease. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org