Martin & All >>This has been discussed about two weeks ago on leaf-user (which was the >>reason I didn't say anything earlier). I've given up trying to floow all the users lists for all my projects thus I did not see that discussion. I've read trough and it seams to me that there is issues with libwrap settings as they are now.
Having read trough the comments on commenting out the lines current lines, I rather then suggest we at least put a the following lines in the hosts.allow file --------- SNIP ---------- #Uncomment the line below if you soly want to relay on Shorewall for protection. #and place a # in fron of the other lines in this file. #ALL:ALL --------- SNIP ---------- A good idea might also be to add a few comments/samples for commonly used applications... Like Tom has done for Shorewall. If we can gather enough samples I can write up a little section for the docs... Jorn -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Martin Hejl Sent: 25. april 2006 12:31 To: leaf-devel@lists.sourceforge.net Subject: Re: [leaf-devel] Hosts.deny & hosts.allow Hi Larry and Jorn, please post plain text messages only - text + HTML can be rejected by the list-server/list-admin. > I expected others to have said some for or against the proposed change. > Oh well... This has been discussed about two weeks ago on leaf-user (which was the reason I didn't say anything earlier). See: http://sourceforge.net/mailarchive/forum.php?thread_id=10135863&forum_id=548 3 The short version is that it's a sane default, and somebody who wants to get rid of libwrap checking can simply add "ALL: ALL" to hosts.allow. IMHO, the default config should not be as open as possible, but rather as secure as possible, and somebody who wants to open the box to the outside world has to make the change manually. Martin ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
