On 21 Oct 1997 [EMAIL PROTECTED] wrote:

> Synopsis: tcpd-wrapper support; use /etc/hosts.(allow|deny)
> 
> State-Changed-From-To: open-closed
> State-Changed-By: dgaudet
> State-Changed-When: Tue Oct 21 15:16:09 PDT 1997
> State-Changed-Why:
> 1.3 should have essentially all the functionality of tcpd,
> including double-reverse (paranoid) DNS, and netmasks.  See
> the new_features_in_1_3.html on our website.

No it doesn't.  There is no way to impose global restrictions on a site
without messing up more specific access control, and there is no way to
easily use a common set of denys for morons across all services.

> 
> It's not easy at all to use /etc/hosts.allow in Apache due
> to how it works (and how it's supposed to perform well).

Why?  Sure, you get a DNS lookup hit if you specify things with DNS but
that isn't a big deal...

Reply via email to