From owner-svn-src-all@FreeBSD.ORG Thu Mar 5 14:40:59 2015 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 62450E6; Thu, 5 Mar 2015 14:40:59 +0000 (UTC) Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 13012FE3; Thu, 5 Mar 2015 14:40:59 +0000 (UTC) Received: from slw by zxy.spb.ru with local (Exim 4.84 (FreeBSD)) (envelope-from ) id 1YTWxN-0000qA-3z; Thu, 05 Mar 2015 17:40:57 +0300 Date: Thu, 5 Mar 2015 17:40:57 +0300 From: Slawa Olhovchenkov To: David Chisnall Subject: Re: svn commit: r279603 - in head: bin/rcp usr.bin/rlogin usr.bin/rsh Message-ID: <20150305144056.GY48476@zxy.spb.ru> References: <20150305122103.GA90978@zxy.spb.ru> <20150305122359.GM17947@FreeBSD.org> <20150305123016.GO48476@zxy.spb.ru> <20150305123053.GN17947@FreeBSD.org> <20150305123349.GP48476@zxy.spb.ru> <20150305123548.GO17947@FreeBSD.org> <48981079-C9B7-411D-87A3-5A8F04924314@FreeBSD.org> <20150305141334.GX48476@zxy.spb.ru> <63BD8258-D2C9-4C94-8A54-63AA104871D9@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <63BD8258-D2C9-4C94-8A54-63AA104871D9@FreeBSD.org> User-Agent: Mutt/1.5.23 (2014-03-12) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: slw@zxy.spb.ru X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false Cc: Baptiste Daroussin , src-committers@freebsd.org, svn-src-all@freebsd.org, Gleb Smirnoff , svn-src-head@freebsd.org, Dmitry Sivachenko X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Mar 2015 14:40:59 -0000 On Thu, Mar 05, 2015 at 02:20:59PM +0000, David Chisnall wrote: > On 5 Mar 2015, at 14:13, Slawa Olhovchenkov wrote: > > > > Not better, no. > > Does telnet support creating server sockets? No. don't need for me. > Does telnet support IPsec? No. Let me guess, only from root and only when kernel with IPsec? And this is equalent to setkey? > Does telnet let you specify the tcp window size? No. tcp window size? not see in manual. Do you talk about "-I length Specifies the size of the TCP receive buffer."? This is not tcp window size. And for TCP you can't specify the tcp window size -- this is dynamic value. > Does telnet come with a massive selection of options for insecure login / authentication? Yes. This is may right to use or not to use secure or not secure login / authentication. Also, I am use telnet login for check kerberos authentication (ssh kerberos authentication (SSO) broken 10 years ago. nobody care). > Telnet is a tool for insecure remote access. nc is a tool for creating and debugging socket connections. > > > telnet more verbose (and by default and more). > > 'nc -v' is less to type than 'telnet' and provides *more* debugging support via -D. % nc -v -D zxy.spb.ru 81 nc: connect to zxy.spb.ru port 81 (tcp) failed: Connection refused % telnet zxy.spb.ru 81 Trying 195.70.199.98... telnet: connect to address 195.70.199.98: Connection refused telnet: Unable to connect to remote host telnet talk about used IP address. nc -D don't talk any additional info. > > And what about 'tools, not policy'? > > What about it? We provide a tool that *is designed for creating and > debugging sockets*. You instead want a tool for insecure remote > login that happens to sort-of work for creating and debugging > sockets and your justification for wanting it is that you can use it > for debugging sockets. I am can use one tool for insecure login, for secure login and for test network sockets. Why not? > From your previous posts, you've clearly not read the nc man page > and have absolutely no idea what it is capable of. Why not spent I am use telnet more 20+ years. I am don't need change telnet to nc for my purpose. > five minutes learning about the tool that we provide that is > *designed specifically for your requirements* and then suggest > places where it could be improved for your needs, rather than > insisting that we provide you with a hammer so that you can keep > bashing screws into walls? You are sell me tools that I am don't need. I can use telnet in any condition, I am reflexive use telnet. When I am need to use nc -- I will use nc. Don't force me to use nc, please!