On Wed, 25 Oct 2006, Alex Zbyslaw wrote:

òÉÈÁÄ çÁÄÖÉÅ× wrote:

A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

With tcpwrappers, you still have to open a socket and burn cycles/ram/resources on the 3-way, followed by a quick RST.

With pf(4), you can maintain a hash list on a L4 block rule and it's much more efficient. No RST needed.

~BAS
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to