[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: your mail



On Thu, Mar 16, 2000 at 10:07:37PM +0000, Tim Haynes wrote:

> Alternatively, people might filter based on different incoming host, network
> or interface[1]; if it's from a site I trust I might allow it for speed and/or
> identity "checking" if required; if I'm not sure about them I might let them
> through to tcp wrappers so an incoming request sparks a scan/finger straight
> back whence it came; otherwise I might just DENY altogether.

 True.  However, IIRC the docs for identd say not to put identd behind tcpd,
because if two computers do this, and then one tries to ident the other one,
you've got a packet storm brewing.

-- 
#define X(x,y) x##y
DUPS Secretary ; http://is2.dal.ca/~dups/
Peter Cordes ;  e-mail: X(peter@cordes.phys. , dal.ca)

"The gods confound the man who first found out how to distinguish the hours!
 Confound him, too, who in this place set up a sundial, to cut and hack
 my day so wretchedly into small pieces!" -- Plautus, 200 BCE


Reply to: