Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   CRUX (http://www.linux-archive.org/crux/)
-   -   Dropping tcp_wrappers support. (http://www.linux-archive.org/crux/562455-dropping-tcp_wrappers-support.html)

Johnny 08-10-2011 06:25 AM

Dropping tcp_wrappers support.
 
Hi.
Archlinux's developers are dropping tcp_wrappers support. Aren't CRUX devs doing to do the same step?
http://www.archlinux.org/news/dropping-tcp_wrappers-support/

Best regards
Sergei P.
_______________________________________________
CRUX mailing list
CRUX@lists.crux.nu
http://lists.crux.nu/mailman/listinfo/crux

Thomas Penteker 08-10-2011 03:18 PM

Dropping tcp_wrappers support.
 
* Johnny (gloomyquazar@mail.ru) wrote:
> Hi.

Hello!

> Archlinux's developers are dropping tcp_wrappers support. Aren't CRUX devs
> doing to do the same step?
> http://www.archlinux.org/news/dropping-tcp_wrappers-support/

"This is due to upstream not having released a new version since April 1997."
is NO argument. The security-side benefits may be doubted (ip addresses can be
forged). tcpwrappers allows one to block clients by netaddresses without the
need for iptables. It's easy and it's clean. Let's stick with tcp_wrappers.

regards, Thomas

--
Fiber optics caused gas main leak
_______________________________________________
CRUX mailing list
CRUX@lists.crux.nu
http://lists.crux.nu/mailman/listinfo/crux

Michal Soltys 08-10-2011 08:31 PM

Dropping tcp_wrappers support.
 
On 11-08-10 17:18, Thomas Penteker wrote:

* Johnny (gloomyquazar@mail.ru) wrote:

Hi.


Hello!


Archlinux's developers are dropping tcp_wrappers support. Aren't CRUX devs
doing to do the same step?
http://www.archlinux.org/news/dropping-tcp_wrappers-support/


"This is due to upstream not having released a new version since April 1997."
is NO argument. The security-side benefits may be doubted (ip addresses can be
forged). tcpwrappers allows one to block clients by netaddresses without the
need for iptables. It's easy and it's clean. Let's stick with tcp_wrappers.

regards, Thomas



Furthermore, tcp_wrappers is not only about poor man's blocking /
allowing. For example, vsftpd uses it as a means to load per-ip specific
configuration files on the fly.

_______________________________________________
CRUX mailing list
CRUX@lists.crux.nu
http://lists.crux.nu/mailman/listinfo/crux


All times are GMT. The time now is 07:04 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.