Hello Scott, > I think I might know what's rankling you here, since I think that I just > finally figured it out myself. > > It would seem that any IP addresses that want to access the P9100 > service need to be granted permission via: /etc/hosts.allow > ?!?!?!?! > Correct, p9100nd is compiled with libwrap support.
> > Anyway, togging my IP address in that file enables/disables p9100 > printing for me. > > To the package maintainer: > - is it possible to remove the dependency on /etc/hosts.allow since > it would seem to be redundant with shorewall rules? It is possible to remove the dependency, but there is a reason why p9100 (and a few other packages) are compiled with libwrap support. LEAF is modular, so it is possible to use LEAF without shorewall as a pure router or printserver (or whatever), libwrap gives some extra security in the cases where iptables/shorewall isn't installed. > - Alternatively, might > the doc'n/helpfile (/var/lib/lrpkg/p9100.help) be updated to indicate > this, um, feature? :) That's a very good suggestion ;) > - Alternatively, maybe have a menu option to edit > /etc/hosts.allow > by way of the lrpkg front-end for p9100d? > That's a tricky one, the p9100d package doesn't "own" the /etc/hosts.allow file. If we create an entry for that file in the p9100 package and an user backups that package (and thinks he saved the hosts.allow changes) the changes are not saved. The hosts.allow file is owned by the etc.lrp package and that's why the config entry is presented in the general "network configuration" entry. Besides, there are more packages which depend on hosts.allow. > (I strongly propose the first since, I wager, few people check the > helpfile [due to not realizing that it's there, like I did a while back for > a different package] and the /etc/hosts.allow serves other purposes - > telnet permission comes to mind). > > (FWIW I'm using > "p910nd Version 0.6" > and it's always been good to me.) > > Thanks to one and all for their work on LEAF! > > > scott; canada > Eric ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
