On Thu, 25 Sep 2003 11:05:53 -0400 (EDT), you wrote:

>I've been toying with the idea for a while now that one could use
>a script similar to your excellent template to generate tcpwrappers
>entries to deny access in the same fashion. I do not know for sure if, 
>given a choice between your suggested access policy method ( access.db)
> and tcpwrappers, which would be more efficient;
>according to the tcpd(8) manpage on a FreeBSD system, inetd actually
>runs a proxy of sorts (tcpd) for the daemon to determine access policy for it,
>then hands off to the daemon if the connection is allowed. Maybe there
>is potential to save some MTA load (and SA processing overhead?) by
>blocking the entries [generated by your template] before the MTA sees 
>them.... ?


I wouldn't wanna run my MTA via inet (or xinet).  It would make more sense to
use the script to generate an iptables rule (or whatever firewall you use).


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to