From owner-freebsd-questions  Fri Jun 25 10:54:57 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from ideaglobal.com (ultra2.ideaglobal.com [194.36.20.11])
	by hub.freebsd.org (Postfix) with ESMTP id D1C4B15230
	for <freebsd-questions@freebsd.org>; Fri, 25 Jun 1999 10:54:52 -0700 (PDT)
	(envelope-from kiril@ideaglobal.com)
Received: (from kiril@localhost)
	by ideaglobal.com (8.9.2/8.9.2) id SAA24793
	for freebsd-questions@freebsd.org; Fri, 25 Jun 1999 18:49:30 +0100 (BST)
From: Kiril Mitev <kiril@ideaglobal.com>
Message-Id: <199906251749.SAA24793@ideaglobal.com>
Subject: configuring/enabling hosts.allow in 3.2
To: freebsd-questions@freebsd.org
Date: Fri, 25 Jun 1999 18:49:29 +0100 (BST)
X-Mailer: ELM [version 2.4 PL25]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Okay, I give up :-)

I need to configure inetd/tcpd/whatever to setup an environment
variable before firing up an inet.conf - controlled service...

here are the settings:

# grep testport /etc/services
testport        8888/tcp

# grep testport /etc/inetd.conf
testport stream  tcp  nowait  root /var/qmail/bin/printenv  printenv

# cat /etc/hosts.allow
printenv : ALL : setenv DAMNENV yes : allow
ALL : ALL : allow

this is /var/qmail/bin/printenv for the curious:

------------------
#!/usr/bin/perl5

open ( LOG , ">>/var/tmp/tcp-env" ) or exit;

print LOG "-------------------------\n";
while (($key, $val) = each %ENV) {
    print LOG "$key = $val\n";
}
------------------

and no, thers is no DAMNENV in its output...

having said that, if I change hosts.allow to be like this:

ALL : ALL : deny

all services promptly fall over, so it does seem to work. 
tcpdchk -v says:
Using network configuration file: /etc/inetd.conf

>>> Rule /etc/hosts.allow line 1:
daemons:  printenv
warning: /etc/hosts.allow, line 1: printenv: service possibly not wrapped
clients:  ALL
command:  setenv DAMNENV yes : allow
access:   granted

>>> Rule /etc/hosts.allow line 2:
daemons:  ALL
clients:  ALL
command:  allow
access:   granted

So, questions:
1. Is there anything else that needs "enabling" (does not seem so)
2. What does "service possibly not wrapped" mean ? exactly ?
3. Does hosts_options(5) apply or not ? (seems not to) 
4. If, perchance, hosts_options(5) does not apply, why is it referred to
in the default /etc/hosts_allow ?
5. How do I fix this :-) ?

please cc: me on replies,

TIA. Kiril



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message