On Sun, Jan 11, 2015 at 09:29:08PM +0100, Tomasz Torcz wrote: > On Sat, Jan 10, 2015 at 12:16:38AM +0200, Pasi Kärkkäinen wrote: > > Hello, > > > > I recently noticed Debian/Ubuntu has had support for "aclexec" in tcp_wrappers via a custom patch since 2006, > > so you can do this in /etc/hosts.allow or hosts.deny: > > > > > > What do people feel about that? I'd like to see support for aclexec included in Fedora's tcp_wrappers package. > > Enhancing tcpwrappers isn't generally a way we are going: > https://lists.fedoraproject.org/pipermail/devel/2014-March/196913.html > > Above discussions is only about proposal, no change was made. But I highly doubt > any serious work on tcpwrappers will happen. > Right.. I'm very used to using tcpwrappers, and it's pretty much in use on all the servers and desktops/laptops I have. But it seems there are some technical issues why other people feel it should be nuked. Oh well.. For example (reverse) DNS based filtering is very simple with tcpwrappers, and the acl scripts.. Thanks for the pointer to the ml discussion! -- Pasi > -- > Tomasz Torcz ,,If you try to upissue this patchset I shall be seeking > xmpp: zdzichubg@xxxxxxxxx an IP-routable hand grenade.'' -- Andrew Morton (LKML) > > -- > devel mailing list > devel@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/devel > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
