http://qa.mandrakesoft.com/show_bug.cgi?id=749





------- Additional Comments From [EMAIL PROTECTED]  2003-04-01 16:21 -------
Downloaded fresh MDK9.1 and experienced same problems with msec levels 4 & 5.
Workaround:
1) add flag NOLIBWRAP to /etc/xinetd.d/fam
2) change local_only to true in /etc/fam.conf
This works and restricts access in similar way as /etc/hosts.deny setting for
msec level 4. The root cause (ie. libwrap not resolving IP address) still needs
to be addressed however. HTH.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.



------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
status: UNCONFIRMED
creation_date: 
description: 
After setting msec to level 4 we notice that : 
Jan  7 07:00:21 spirit msec: Disabling non local services 
Jan  7 07:00:21 spirit msec: appended in /etc/hosts.deny the line: 
Jan  7 07:00:21 spirit msec: ALL:ALL EXCEPT 127.0.0.1:DENY 
 
fam is registered and portmap is running : 
[EMAIL PROTECTED] root]# rpcinfo -p localhost 
   program vers proto   port 
    100000    2   tcp    111  portmapper 
    100000    2   udp    111  portmapper 
    391002    2   tcp  42967  sgi_fam 
 
BUT programs cannot use fam since in the syslog we see : 
Jan  7 07:13:09 spirit xinetd[23147]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23147]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23148]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23148]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23149]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23149]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23150]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23150]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23151]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23151]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23152]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23152]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23153]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23153]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23154]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23154]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23155]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23155]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23156]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23156]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23157]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23157]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23158]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23158]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23159]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23159]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23160]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23160]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23161]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23161]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23162]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23162]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23163]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23163]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23164]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23164]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23165]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23165]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23166]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23166]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23167]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23167]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23168]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23168]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23169]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23169]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23170]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23170]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[23171]: warning: can't get client address: Transport 
endpoint is not 
connected 
Jan  7 07:13:09 spirit xinetd[23171]: libwrap refused connection to sgi_fam from <no 
address> 
Jan  7 07:13:09 spirit xinetd[22412]: Deactivating service sgi_fam due to excessive 
incoming 
connections.  Restarting in 30 seconds. 
Jan  7 07:13:40 spirit xinetd[22412]: Activating service sgi_fam 
 
reverting to msec level 3 which remove the hosts.deny lines fixes the problem 
 
however I really wonder if this is not a glibc problem in fact, since several program 
are now 
unable to correctly resolve hostnames to ip address, thus the message 'libwrap refused 
connection to sgi_fam from <no address>'  Notice the no address 
 
see also my report on kopete (same host resolution problem)

Reply via email to