Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 20 Jun 1999 17:49:59 -0700
From:      Aaron Smith <aaron-fbsd@mutex.org>
To:        freebsd-hackers@freebsd.org
Cc:        wietse@freebsd.org
Subject:   inetd/tcpd...changing hosts.allow...plus a documentation issue
Message-ID:  <199906210049.RAA01387@sigma.veritas.com>

next in thread | raw e-mail | index | archive | help
hi all,

[this is all on 3.2-RELEASE]

i recently had some problems getting inetd tcp wrappers to do "the right
thing". i tried a sample configuration where i allowed telnet explicitly:

ALL : localhost : allow
telnetd : ALL : allow
ALL : ALL : deny

unfortunately incoming telnet was still denied. at first i tried HUPping
inetd to reread the hosts.allow, but after looking at the source it appears
to re-read its information each time hosts_access is called. has anyone
else had problems updating this file and getting inetd to reflect the new
behavior?

note that "tcpdmatch telnetd <client_host>" was reporting "access granted"
and yet inetd was refusing the connection. killing inetd COMPLETELY and
restarting inetd caused it to start accepting the connections.

i'm looking at it a bit but perhaps a maintainer knows if something is
being cached here?

on another note, LIBWRAP_INTERNAL looks like it must be defined for
internal services to be wrapped, yet it is not defined during freebsd's
compile -- only LIBWRAP is. yet freebsd's inetd man page says that internal
services may be wrapped. since it is not currently so by default, perhaps
either the documentation or the Makefile should be modified?

aaron


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199906210049.RAA01387>