[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#531785: marked as done (tcp-wrappers support not working)



Your message dated Thu, 26 Aug 2010 04:33:32 +0100
with message-id <1282793612.22839.231.camel@localhost>
and subject line Re: tcp-wrappers support not working
has caused the Debian Bug report #531785,
regarding tcp-wrappers support not working
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
531785: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531785
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: nfs-kernel-server
Version: 1:1.1.6-1
Severity: important
Tags: security

How to reproduce:

echo "mountd statd portmap lockd: ALL" >> /etc/hosts.deny
# the second line is acually not needed, but shows that the problem is
# not a wrong service name
echo "32767: ALL" >> /etc/hosts.deny

telnet servername 32767

The connection is accepted without being immediately closed and no error
is logged to daemon.*.
strace shows that the /etc/hosts.* files are not opened and that any
input provided to the telnet process is received by the daemon.

It would also be a good idea to add support to the daemon to bind to
localhost, portmap style, since this is enough for NFSv4.

-- 
ciao,
Marco

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
I'm closing this due to lack of response.

Ben.

-- 
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---

Reply to: