Your message dated Tue, 18 Apr 2006 15:33:24 +0530
with message-id <[EMAIL PROTECTED]>
and subject line Bug#213635: pdnsd should have some kind of acl
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: pdnsd
Version: 1.1.8b1par7-1
Severity: wishlist
It should be possible to pdnsd to allow only a given net to access it.
If running with ppp, anybody on the net can ask my server for an
address. And that I don't want. And if pdnsd is installed as the DNS
server of my SOHO LAN, than I don't won't do block ALL calls. It should
be a nice feature.
Cheers
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux halfling 2.4.22 #1 Wed Oct 1 02:00:14 CEST 2003 i686
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8
Versions of packages pdnsd depends on:
ii adduser 3.51 Add and remove users and groups
ii libc6 2.3.2-8 GNU C Library: Shared libraries an
-- no debconf information
--- End Message ---
--- Begin Message ---
tag 213635 + wontfix
thanks
On 06/04/14 01:13 +0530, Y Giridhar Appaji Nag said ...
> On 03/10/01 18:40 +0200, Claudio Andr?? Till Clemens said ...
> >
> > It should be possible to pdnsd to allow only a given net to access it.
> > If running with ppp, anybody on the net can ask my server for an
> > address. And that I don't want. And if pdnsd is installed as the DNS
> > server of my SOHO LAN, than I don't won't do block ALL calls. It should
> > be a nice feature.
>
> Both these are doable without pdnsd. See pdsnd.conf(5), the server_ip,
> interface options to allow only local access. Restricting access on a
> lan can be done via some firewall rules (I have a feeling you wouldn't
> want to restrict access only to the DNS server running).
>
> And considering the main advertised use of pdnsd (permanent caching
> etc.), I suspect if this feature would ever be implemented by upstream
> and in my opinion this bug should be tagged as wontfix.
Upstream has indicated that they will not implement this wishlist item.
On an (un?)related note, they may add a feature in future which would
allow multiple IP addresses in the server_ip config option.
Giridhar
--
Y Giridhar Appaji Nag | http://www.appaji.net/
--- End Message ---
