Martin & All

>>This has been discussed about two weeks ago on leaf-user (which was the
>>reason I didn't say anything earlier).
I've given up trying to floow all the users lists for all my projects thus I
did not see that discussion.  I've read trough and it seams to me that there
is issues with libwrap settings as they are now.

Having read trough the comments on commenting out the lines current lines, I
rather then suggest we at least put a the following lines in the hosts.allow
file
--------- SNIP ----------
#Uncomment the line below if you soly want to relay on Shorewall for
protection.
#and place a # in fron of the other lines in this file.
#ALL:ALL
--------- SNIP ----------

A good idea might also be to add a few comments/samples for commonly used
applications... Like Tom has done for Shorewall.

If we can gather enough samples I can write up a little section for the
docs...

Jorn


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Martin Hejl
Sent: 25. april 2006 12:31
To: leaf-devel@lists.sourceforge.net
Subject: Re: [leaf-devel] Hosts.deny & hosts.allow


Hi Larry and Jorn,

please post plain text messages only - text + HTML can be rejected by
the list-server/list-admin.

> I expected others to have said some for or against the proposed change.
> Oh well...
This has been discussed about two weeks ago on leaf-user (which was the
reason I didn't say anything earlier).

See:
http://sourceforge.net/mailarchive/forum.php?thread_id=10135863&forum_id=548
3

The short version is that it's a sane default, and somebody who wants to
get rid of libwrap checking can simply add "ALL: ALL" to hosts.allow.
IMHO, the default config should not be as open as possible, but rather
as secure as possible, and somebody who wants to open the box to the
outside world has to make the change manually.

Martin



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to