Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Mar 1999 12:09:40 -0500
From:      James FitzGibbon <james@ehlo.com>
To:        freebsd-current@freebsd.org
Subject:   Suggested change to rc.network
Message-ID:  <19990305120940.A12421@ehlo.com>

next in thread | raw e-mail | index | archive | help

There is already a precedent for allowing users to use drop-in replacements
for certain network daemons by specifying the path to the daemon in rc.conf. 
Examples include the ${ntpdate_program} and ${xtnpd_program} variables that
are used in /etc/rc.network.

Wietse Venema has for some time had a replacement portmapper that uses
libwrap to control access using hosts.allow.  It doesn't protect the
daemons, but it can help disguise what RPC services you are running.

I'm suggesting to have rc.network use a ${portmap_program} variable, with a
suitable default in /etc/defaults/rc.conf of "/usr/sbin/portmap".

Any comments appreciated.

-- 
j.

James FitzGibbon                                                james@ehlo.com
EHLO Solutions                                         Voice/Fax (416)410-0100


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990305120940.A12421>