Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Apr 99 01:12:14 -0700
From:      Rahul Dhesi <dhesi@rahul.net>
To:        freebsd-current@freebsd.org
Subject:   Re: showing full host names in output from who/finger/last 
Message-ID:  <199904120812.AA16244@waltz.rahul.net>
In-Reply-To: Message from Robert Watson <robert@cyrus.watson.org>  of Sun, 11 Apr 99 19:05:30 -0500

next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson <robert@cyrus.watson.org> writes:

> I'd actually like to see wtmp only use IP addresses, never hostnames. 
> Spoofed names are fairly easy to arrange; with IP filtering on border
> routers, spoofed IPs are harder....
> This of course sticks you with the task of DNS
> lookups when viewing wtmp, when you may already have done them at login
> time....

The 'finger', 'who', and 'w' commands on the SunOS machines here all do
DNS lookups for longer hostnames, and it's rare that there is any
significant DNS lookup delay.  The reasons are simple:  The lookup was
done when the user logged in, so the DNS server has the answer in its
cache.  And even if not, if anybody did finger/who/w in the recent past,
that caused the answer to be brought into the name server's cache.

(I do run BIND with negative caching enabled, which probably helps keep
delays short for reverse lookups where some name server is not
responding.)

Rahul


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199904120812.AA16244>