On Mar 10, 2011, at 4:41 PM, Lukas Haase wrote:
However, after upgrading from Debian lenny to Debian squeeze
(version 2.4.3-1.1squeeze1) I get the messages in syslog:
ACL in upsd.conf is no longer supported - switch to LISTEN
ACCEPT in upsd.conf is no longer supported - switch to LISTEN
REJECT in upsd.conf is no longer supported - switch to LISTEN
allowfrom in upsd.users is no longer used
Well, I commented out the lines and it works now. However, there is
no access restriction anymore! :-( Why have these wonderful features
been dropped? Are there at least any alternatives for ACL, ACCEPT,
REJECT and allowFrom?
The following web page indicates that the Debian squeeze packages of
NUT were linked against libwrap, which has had a much longer track
record of user-space connection filtering than NUT:
http://packages.debian.org/squeeze/nut
This information should be in /usr/share/doc/nut/UPGRADING.gz.
The NUT mailing list archives have a number of threads where the
reasoning for this change has been discussed.
You also might want to consider kernel-level firewall rules. That
means that you won't be exposed to bugs in either NUT's connection
handling, or that of libwrap.
_______________________________________________
Nut-upsuser mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/nut-upsuser
