From owner-freebsd-hubs Wed Mar 13 23:50:17 2002 Delivered-To: freebsd-hubs@freebsd.org Received: from srv1.cosmo-project.de (srv1.cosmo-project.de [213.83.6.106]) by hub.freebsd.org (Postfix) with ESMTP id 5F47537B404 for ; Wed, 13 Mar 2002 23:50:14 -0800 (PST) Received: (from uucp@localhost) by srv1.cosmo-project.de (8.11.6/8.11.6) with UUCP id g2E7oCu54269; Thu, 14 Mar 2002 08:50:12 +0100 (CET) (envelope-from ticso@cicely8.cicely.de) Received: from cicely8.cicely.de (cicely8.cicely.de [10.1.1.10]) by cicely5.cicely.de (8.12.1/8.12.1) with ESMTP id g2E7kqEL032292; Thu, 14 Mar 2002 08:46:52 +0100 (CET)?g (envelope-from ticso@cicely8.cicely.de) Received: (from ticso@localhost) by cicely8.cicely.de (8.11.6/8.11.6) id g2E7kpm16124; Thu, 14 Mar 2002 08:46:51 +0100 (CET) (envelope-from ticso) Date: Thu, 14 Mar 2002 08:46:50 +0100 From: Bernd Walter To: Dan Langille Cc: hubs@FreeBSD.ORG Subject: Re: restricting cvsupd access to a domain Message-ID: <20020314074650.GA16056@cicely8.cicely.de> References: <20020313172013.V1568-100000@m20.unixathome.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020313172013.V1568-100000@m20.unixathome.org> User-Agent: Mutt/1.3.26i X-Operating-System: FreeBSD cicely8.cicely.de 5.0-CURRENT i386 Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Mar 13, 2002 at 05:24:54PM -0500, Dan Langille wrote: > Hi folks, > > It seems our cvsup server (cvsup.nz.freebsd.org) is attracting attention > from non .nz domains. This is putting our free hosting in danger as it > greatly increases the cost to our provider (http://www.citylink.co.nz/). > I would like to restrict access to this server to .nz only. > > Reading man cvsupd, I found cvsupd.access which looks like the way to go. > But it appears this file handles only hostnames, not partial matching, so > I can't do a: > > +.nz Even it it would work some nz user might use .com .net .org domains. > Any clues on how to easily do this? Usually you would get a list of allowed networks by traversing whois routing databases. -- B.Walter COSMO-Project http://www.cosmo-project.de ticso@cicely.de Usergroup info@cosmo-project.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message