Re: rlinetd security
Jason Thomas <jason@topic.com.au> writes upside-down:
> this stuff can also be controlled using hosts.deny and hosts.allow. so
> then any inetd prog will do!
No it can't. There's a difference between not listening on the interface at
all, and filtering it out by allowing them to connect to the port first and
only later saying `I don't like the look of your IP#'.
If nothing else, you *should* use rlinetd or xinetd or similar to control
the binding *as well as* tightening down hosts.{allow,deny}.
~Tim
--
09:43:56 up 3 days, 13:48, 16 users, load average: 0.00, 0.00, 0.00
piglet@stirfried.vegetable.org.uk |Ideologies come, ideologies go
http://piglet.is.dreaming.org |A waste of words, and endless flow
Reply to: