Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Oct 1998 12:12:10 -0500 (CDT)
From:      Chad Dubuque <freebsdstable@rrnet.com>
To:        freebsd-stable@FreeBSD.ORG
Subject:   tcp-wrappers (was Re: firewalling)
Message-ID:  <199810151712.MAA06112@rrnet.com>
In-Reply-To: <19981012030740.A25211@rucus.ru.ac.za> from "Neil Blakey-Milner" at Oct 12, 98 03:07:41 am

next in thread | previous in thread | raw e-mail | index | archive | help
Neil Blakey-Milner wrote:

[...]
> Not every service you run runs from inetd, which is the easiest thing to
> transfer to TCP wrappers.
> 
> Things like web servers, ssh, irc servers, named, SQL databases, smbd, and
> so forth aren't necessarily easy to convert to TCP wrappers.
[...]

ssh does (relatively) easily convert to TCP Wrappers, as do the latest
Sendmails. While not everything works with TCP Wrappers, I'd encourage
anyone thinking of writing a TCP-daemon to encorporate them.

OTOH, I'd definitely use a firewall, too. ;-) Good network planning will
tell you to have your web servers and other "public servers" in your DMZ and
things you need private behind a firewall. But this is off-topic...

On topic, I need to know what compilation options were used when compiling
the TCP wrappers for the packages. I couldn't figure out (quickly) how to
make the shared library (libwrap.so.7.6) from the standard src distribution.

Thanks in advance.

-- 
Chad Dubuque       cdubuque@rrnet.com        Fargo, N.D. (USA)
Red River Net - Internet Communications  http://www.rrnet.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810151712.MAA06112>