From owner-cvs-all  Tue Jan 26 11:57:45 1999
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id LAA21807
          for cvs-all-outgoing; Tue, 26 Jan 1999 11:57:45 -0800 (PST)
          (envelope-from owner-cvs-all@FreeBSD.ORG)
Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.95.76.54])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA21799;
          Tue, 26 Jan 1999 11:57:44 -0800 (PST)
          (envelope-from sgk@troutmask.apl.washington.edu)
Received: (from sgk@localhost)
	by troutmask.apl.washington.edu (8.9.1/8.9.1) id LAA06455;
	Tue, 26 Jan 1999 11:34:24 -0800 (PST)
	(envelope-from sgk)
From: Steve Kargl <sgk@troutmask.apl.washington.edu>
Message-Id: <199901261934.LAA06455@troutmask.apl.washington.edu>
Subject: Re: Small, useful tools (Was: Re: 'cpdup' program, and question)
In-Reply-To: <199901261922.LAA20798@apollo.backplane.com> from Matthew Dillon at "Jan 26, 1999 11:22:21 am"
To: dillon@apollo.backplane.com (Matthew Dillon)
Date: Tue, 26 Jan 1999 11:34:24 -0800 (PST)
Cc: mark@grondar.za, phk@critter.freebsd.dk, andreas@klemm.gtn.com,
        nate@mt.sri.com, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

Matthew Dillon wrote:
>     I have never personally liked using tcp-wrappers.  BEST doesn't use it
>     at all, and for good reason:  (A) there usually isn't enough stuff worth
>     wrapping, and (B) any machine loaded enough to be a target for repeated
>     spamming, attacks, etc.... is also loaded enough that tcp-wrappers 
>     represents too large a burden.  (C) ipfw works well enough for what
>     I care about.
> 
>     I don't mind tcp-wrappers being included with the system, but I will
>     fight tooth and nail if someone actually tries to make tcp-wrappers
>     a run-time element of the standard FreeBSD distribution.
> 

In rc.conf,

tcp_wrapper="YES"
inetd_enable="YES"              # Run the network daemon dispatcher (or NO).
inetd_conf="/etc/inetd.wrapped.conf"
inetd_flags=""                  # Optional flags to inetd.

In rc,

if [ "X${inetd_enable}" != X"NO" ]; then
	if [ "X${tcp_wrapper}" != X"YES" ]; then
        echo -n ' inetd';       inetd ${inetd_flags} ${inetd_conf}
	else
		echo -n ' inetd';       inetd ${inetd_flags}
	fi
fi

-- 
Steve

finger kargl@troutmask.apl.washington.edu
http://troutmask.apl.washington.edu/~clesceri/kargl.html

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message