From owner-freebsd-security Tue Oct 16 13:21:56 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-3.dsl.lsan03.pacbell.net [63.207.60.3]) by hub.freebsd.org (Postfix) with ESMTP id D1A8E37B403 for ; Tue, 16 Oct 2001 13:21:51 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 7B00166B0E; Tue, 16 Oct 2001 13:21:51 -0700 (PDT) Date: Tue, 16 Oct 2001 13:21:51 -0700 From: Kris Kennaway To: Igor Roshchin Cc: security@freebsd.org Subject: Re: tcp_wrappers Message-ID: <20011016132151.B21030@xor.obsecurity.org> References: <200110161738.f9GHcBm12030@giganda.komkon.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="bCsyhTFzCvuiizWE" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200110161738.f9GHcBm12030@giganda.komkon.org>; from str@giganda.komkon.org on Tue, Oct 16, 2001 at 01:38:11PM -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --bCsyhTFzCvuiizWE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Oct 16, 2001 at 01:38:11PM -0400, Igor Roshchin wrote: >=20 > Hello! >=20 > on a 4.x system: tcpd_chk(8) barks: > warning: /etc/hosts.allow, line 71: popper: service possibly not wrapped > >From some side symptoms I suspect it might be the case. > Does it make sense to run tcp_wrappers from the ports collection > on the popper daemon ? >=20 > I noticed that tcp_wrappers port in its Makefile has : >=20 > .if exists(/usr/include/tcpd.h) > FORBIDDEN=3D tcp_wrappers is in the base system > .endif >=20 > I wonder if there is any conflict if I used both base-system tcp_wrappers, > and the one from ports (the latter for wrapping a particular daemon). There's absolutely no reason for you to install the port - everything it contains is functionally available in the base system (with tcpd replaced by inetd). Kris --bCsyhTFzCvuiizWE Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7zJbfWry0BWjoQKURAmV1AKCgdSiacgQkoWOfPE9uK/rsuvlMcwCfQw+N T4Ww1hOnUM1Qaz1HFqk7nUM= =zfC4 -----END PGP SIGNATURE----- --bCsyhTFzCvuiizWE-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message