From owner-freebsd-questions Sat Oct 14 17:51:35 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82]) by hub.freebsd.org (Postfix) with ESMTP id E81AE37B66D for ; Sat, 14 Oct 2000 17:51:32 -0700 (PDT) Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net with Microsoft SMTPSVC(5.5.1877.197.19); Sat, 14 Oct 2000 17:50:11 -0700 Received: (from cjc@localhost) by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e9F0pSG20679; Sat, 14 Oct 2000 17:51:28 -0700 (PDT) (envelope-from cjc) Date: Sat, 14 Oct 2000 17:51:27 -0700 From: "Crist J . Clark" To: MB Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Double reverse lookup: OFF !!!! Message-ID: <20001014175127.D25121@149.211.6.64.reflexcom.com> Reply-To: cjclark@alum.mit.edu References: <20001014155254.A25121@149.211.6.64.reflexcom.com> <20001014231112.1F55C7E7E@iaehv.iae.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20001014231112.1F55C7E7E@iaehv.iae.nl>; from bts@iae.nl on Sun, Oct 15, 2000 at 01:11:12AM +0200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, Oct 15, 2000 at 01:11:12AM +0200, MB wrote: > > On Sat, Oct 14, 2000 at 09:39:50PM +0200, Martin Bartelds wrote: > > > Some of my customers can't connect to my 4.1 system with anonymous ftp. > > > > > > When it happens, I do get an error message on the console: > > > "Can't verify hostname: getaddrinfo(....., AF_INET) failed." > > > > > > As far as I know, this is the paranoid double reverse lookup which fails to > > > match the IP-number with the hostname. > > > > > > I do not want to let my customers stumble on this. > > > How can I turn this off ? I did have a look in the ftpd & inetd > > > daemon-sources, but did not find anything about it. > > > > > > > > > Any Idea ? > > > > It's the TCP wrapper. If you want to find the source, look in > > /usr/src/contrib/tcp_wrappers. What's in your /etc/hosts.{allow,deny}? > > host.allow does have: > ALL:ALL:allow > > So I'm pretty much surprised, the connections get declined. That is the first rule, right? If you still have problems, you might consider running ftpd(8) as an independent daemon outside of inetd(8). -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message