On Sun, 8 Jun 2003, George Theall wrote:

> Actually, Nessus only checks the host IP, not the hostname.  [Search for
> "hosts_ctl" in nessus-core/nessusd/nessusd.c.]

I thought tcpwrappers supported hostnames. Are you saying that nessus
reads hosts.allow/hosts.deny, but doesn't really use the tcpwrappers
library to grant access? I'm not a C programmer, but nessusd.c includes
tcpd.h which has structures for supporting hostnames as well as IP
addresses.

Hostnames are kind of useful in tcpwrappers if you have nessus clients
that use dynamic DNS. If client.codegnome.org always points to the current
IP address of the client, but the IP changes periodically, managing by IP
becomes a pain very quickly if you have a number of such clients.

-- 
The DMCA is anti-consumer. The RIAA has no right to rewrite copyright
laws to suit themselves.

Reply via email to