From owner-freebsd-current  Sun Jun 27 11:29: 1 1999
Delivered-To: freebsd-current@freebsd.org
Received: from axl.noc.iafrica.com (axl.noc.iafrica.com [196.31.1.175])
	by hub.freebsd.org (Postfix) with ESMTP id 4D00E14D00
	for <current@freebsd.org>; Sun, 27 Jun 1999 11:28:54 -0700 (PDT)
	(envelope-from sheldonh@axl.noc.iafrica.com)
Received: from sheldonh (helo=axl.noc.iafrica.com)
	by axl.noc.iafrica.com with local-esmtp (Exim 3.02 #1)
	id 10yJfh-0008LF-00
	for current@freebsd.org; Sun, 27 Jun 1999 20:28:53 +0200
From: Sheldon Hearn <sheldonh@uunet.co.za>
To: current@freebsd.org
Subject: HEADS UP! Inetd wrapping OFF by default
Date: Sun, 27 Jun 1999 20:28:53 +0200
Message-ID: <32068.930508133@axl.noc.iafrica.com>
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


Hi folks,

I've just committed a change to inetd that will effectively turn TCP
Wrapping off for anyone who has an installed /etc/rc.conf that specifies
an inetd_flags value, as well as anyone who makes world without running
mergemaster to update /etc/defaults/rc.conf .

This will not be a problem for most people.

Inetd now takes command-line options to enable wrapping. This was a
decision taken with the approval of our release engineer in an attempt
to revert a backward-compatibility problem introduced in 3.2-RELEASE.

The relevant changes to the manpage follow:
"
SYNOPSIS
     inetd [-d] [-l] [-w] [-c maximum] [-C rate] [-a address] [-p filename]
           [-R rate] [configuration file]
[...]
DESCRIPTION
[...]
     -w      Turn on TCP Wrapping. If this option is specified
             twice, internal services will also be wrapped. See the
             IMPLEMENTATION NOTES section for more information on TCP
             Wrappers support.

[...]
IMPLEMENTATION NOTES

     When given the -w option, inetd will wrap all services specified as
     ``stream tcp nowait'' except for ``internal'' services. If the -w
     option is given twice, such ``internal'' services will be wrapped
     as well.

     When wrapping is enabled, the tcpd daemon is not required, as that
     functionality is builtin.  For more information on TCP Wrappers;
     see the relevant documentation ( hosts_access(5) ).
"

When this change is merged to STABLE, the release notes will be updated
and a fat HEADS UP will be posted to the freebsd-stable mailing list.

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message