| Bill Jonas on Mon, 9 Sep 2002 12:24:22 -0400 |
|
On Mon, Sep 09, 2002 at 11:57:12AM -0400, Fred K Ollinger wrote:
> tcp wrappers means you need to put it in xinetd/inetd. If you run it as a
> service, then it will always connect, and ignore hosts.deny.
...Unless the application in question is compiled against libwrap. This
isn't so much a function of the software itself as it is the way it was
compiled. Debian, for instance, links all network daemons against
libwrap (if I'm not mistaken). This means that you don't have to run
the daemon from {,x}inetd in order to have it pay attention to
/etc/hosts.{allow,deny} (ie, hosts_access(5)).
Food for thought, anyway.
--
Bill Jonas * bill@billjonas.com * http://www.billjonas.com/
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety." -- Benjamin Franklin
Attachment:
pgpvC51iryCUg.pgp
|
|