On Sat, 9 Jan 1999, Karellen wrote:

> There's an example in the FAQ that states I can use tcp wrappers.
> I don't know where I'm mistaken:
> 
> /etc/hosts.allow
> tcp-env: 193.230.247.73, 192.168.221.0/255.255.255.0: export RELAYCLIENT=""
> 
> /etc/hosts.deny
> ALL:ALL

This is your mistake.  You are denying everything for which you do not set
RELAYCLIENT which is not what you want.

Add another entry to /etc/hosts.allow:

tcp-env:ALL

This will allow all other hosts to deliver mail to you (after being
checked against /var/qmail/control/rcpthosts) and only the ones
in your original entry will be able to relay.

> 
> man 5 hosts_access
> *snip* daemon_list : client_list [ : shell_command ] *snip*
> 
> Is it mandatory that I switch to ucspi-tcp? (I know it's better).
> 

No, but it is prefered for various reasons.

---------------------------------
Timothy L. Mayo                         mailto:[EMAIL PROTECTED]
Senior Systems Manager                  http://www.mayod.nb.net/
The National Business Network Inc.
localconnect(sm)                        http://www.nb.net/

Reply via email to