> From: Gordon Rowell [mailto:[EMAIL PROTECTED]]
> If you start trusting what identd gives you, you're on a slippery > slope :-) I'm constantly amazed when sites require identd in the belief > that it actually tells them anything...(actually, it can tell them > _anything_ - Who would you like to be today?). The real use for identd info is for multi-user sites with real administrators. If the administrator configures identd to provide accurate (or obsfucated but reversible) information then he will know who is responsible when he receives a complaint that includes the ident info. In these days of proxied connections to PC's that the users control themselves it is probably a lot less useful, but still worth making connections wait for the timeout through misconfigured firewalls that block the request without returning the 'denied' ICMP packet. Les Mikesell [EMAIL PROTECTED] -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
