On Jul 10, Pigeon <[EMAIL PROTECTED]> wrote:
> In the case of dovecot, the daemon responding to the incoming imap
> (or pop3) connection is named "imap-login" (or "pop3-login").
> Therefore, unless the entries in /etc/hosts.{allow,deny} use the
> daemon name "imap-login" instead of the obvious "imap" or "imap2" that
> one might deduce from reading /etc/services, they will not match the
> daemon name provided by tcpd.c.
Right, I should have tought about this...
Now I feel bad because you spent all this time working on a patch I
cannot accept. Overloading the process name to also be a port name is
unacceptable because it may change existing configurations.
OTOH the feature you are proposing may be interesting, so I suggest you
try again with a new patch which only consider port numbers and not
symbolic names. Hopefully it will also be much less intrusive.
BTW, the correct way to work on a DBS package after unpacking it is
like:
./debian/rules unpack
<do stuff>
./debian/rules diff
Then move your patch to debian/patches/ and clean+unpack again.
> Now, there is much generic Linux documentation on the net that says
> that the daemon names in /etc/hosts.{allow,deny} should correspond to
> those in /etc/services. Certainly the dovecot wiki entry I referred to
There is a lot of stupid and broken Linux documentation around.
hosts_access(5) is very clear about this.
> But there is nothing in the Debian changelogs to indicate that support
> for /etc/services has been removed from the Debian package for any
> reason - no indication as to why the Debian package doesn't behave as
> the generic, non-Debian-specific information suggests it might.
Because there has never been such a behavior in the official
tcp-wrappers package, nor I know about other distributions having
modified it (and I check most of them from time to time).
--
ciao,
Marco
signature.asc
Description: Digital signature
