From owner-freebsd-stable Mon Apr 17 8: 1:58 2000 Delivered-To: freebsd-stable@freebsd.org Received: from kci.kciLink.com (kci.kciLink.com [204.117.82.1]) by hub.freebsd.org (Postfix) with ESMTP id 6ECC337B881 for ; Mon, 17 Apr 2000 08:01:56 -0700 (PDT) (envelope-from khera@kciLink.com) Received: from onceler.kcilink.com (onceler.kciLink.com [204.117.82.2]) by kci.kciLink.com (Postfix) with ESMTP id E5950E895 for ; Mon, 17 Apr 2000 11:01:52 -0400 (EDT) Received: (from khera@localhost) by onceler.kcilink.com (8.9.3/8.9.3) id LAA37876; Mon, 17 Apr 2000 11:01:52 -0400 (EDT) (envelope-from khera@kci.kcilink.com) From: Vivek Khera MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14587.10080.867467.456592@onceler.kcilink.com> Date: Mon, 17 Apr 2000 11:01:52 -0400 (EDT) To: freebsd-stable@FreeBSD.ORG Subject: Re: sshd and tcp-wrappers In-Reply-To: <20000417090605.A2443@osaka.louisville.edu> References: <20000417122732.A1826@phy.hr> <20000417082136.C95086@osaka.louisville.edu> <20000417150004.A2376@phy.hr> <20000417090605.A2443@osaka.louisville.edu> X-Mailer: VM 6.72 under 21.1 (patch 8) "Bryce Canyon" XEmacs Lucid Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG >>>>> "KS" == Keith Stevenson writes: KS> sshd(8) provides its own internal facility for allowing or denying KS> hosts based upon IP address. Using both the internal facility and KS> TCP Wrappers would incur additional work on accepted connections. KS> Personally, I use TCP Wrappers on SSH and disable the internal KS> facility. The internal facility *is* TCP wrappers. It just doesn't need the tcpd program, which only exists to wrap programs that don't know how to do it themselves. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vivek Khera, Ph.D. Khera Communications, Inc. Internet: khera@kciLink.com Rockville, MD +1-301-545-6996 PGP & MIME spoken here http://www.kciLink.com/home/khera/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message