Commit Graph

10 Commits

Author SHA1 Message Date
sheldonh
a0597b6128 Add IP addresses to the rules required to "Allow anything from
localhost", since portmap(8) is included in "anything".

Submitted by:	Doug Barton <Doug@gorean.org>
2000-05-05 08:31:59 +00:00
cwt
c34ee5c602 Clarify the disposition of hosts.deny and provide a logically
consistent portmap example rule.
Reviewed by: obrien, markm
Obtained-good-ideas from: obrien
2000-03-28 17:28:56 +00:00
jkh
96a200fee3 The default rule in this file actually sent mail to root as its default
action when denying access to a service.  Unfortunately, this also makes
a dandy denial-of-service attack possible.  Change to just log the event
and shoot a "go away" response back down the socket.
2000-02-17 04:52:23 +00:00
obrien
39922b4fbe Fix English. Also use full spelling and reorg a little while I'm here.
Submitted by:	Andy Farkas <andyf@speednet.com.au>
2000-01-25 11:25:59 +00:00
obrien
68f9b25388 MFS: note that only IP addresses work when wrapping the portmapper.
Make clearer we consider this only an example, and admins should really
write this file for their needs.
1999-11-25 03:00:44 +00:00
peter
cdad5bae8c $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
sheldonh
42354f839f Add a sample entry for Exim, in preparation for the upcoming behaviour
change in the port, where TCP Wrapper support will become the default.

Requested by:	markm
1999-08-03 14:52:46 +00:00
obrien
ff73ed9a3c Use /usr/bin/finger rather than `safe_finger'. 1999-05-08 02:19:25 +00:00
markm
740ebe8328 Use more politically correct examples, and expand the examples a bit. 1999-04-08 19:08:53 +00:00
markm
3fbb024479 Add an example hosts.allow for the (base system) tcp_wrappers.
Anyone with good ideas for this is welcome to contribute.
1999-03-28 10:47:26 +00:00