Re: Task harden.
On Sun, Apr 01, 2001 at 10:06:52PM -0700, John H. Robinson, IV wrote:
> On Sun, Apr 01, 2001 at 10:26:08PM +0200, Ola Lundqvist wrote:
> > And now some questions (that can be dicussed).
> > * I intend to conflict with inetd. Do you think that is ok?
>
> yes! there are good inetd's to replace it with (tcpserver, and xinetd[2]
> both come to mind)
I recently talked to the maintainer of netbase (netkit-inetd), and he said
that he wasn't going to remove netbase's dependency on netkit-inetd, which
would make this an extremely bad idea ATM...
>
> -john
>
> [1] my theory is: if a large number of security violations have been
> found, chances are, more are still lurking. a complete re-write does
> get to wipe the slate clean, but i still don't trust BIND and no one
> is ever going to convince me otherwise. same with sendmail
>
> [2] i have not too much familiarity with xinetd to actually recomend it,
> but i would rather use that that inetd
I use(d?) xinetd, and I feel that it's heads and shoulders above inetd.
It allows you to bind to specific interfaces, and its config file is much
cleaner than that of inetd. Finally, it can convert an inetd.conf to an
xinetd.conf
>
> [3] yes, some of the things i listed are non-free. i can't help that :(
--xsdg
--
___________________________________________________
/ ::Mouse movement detected:: \
\ ::Reboot Windows to activate changes:: /
/ http://xsdg.hypermart.net|xsdg@softhome.net \
\___________________________________________________/
Reply to: