Subject: Re: bin/30479: named should use libwrap/hosts_access
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: Greg A. Woods <woods@planix.com>
List: netbsd-bugs
Date: 06/16/2005 04:44:04
The following reply was made to PR bin/30479; it has been noted by GNATS.
From: "Greg A. Woods" <woods@planix.com>
To: NetBSD GNATS submissions and followups <gnats-bugs@netbsd.org>
Cc:
Subject: Re: bin/30479: named should use libwrap/hosts_access
Date: Thu, 16 Jun 2005 00:43:09 -0400 (EDT)
[ On Thursday, June 9, 2005 at 09:53:00 (+0000), paul@Plectere.com wrote: ]
> Subject: bin/30479: named should use libwrap/hosts_access
>
> Note that named does not use libwrap/hosts_access - which would/could
> be very useful in blocking exploitation attempts.
BIND-8 and newer has support for its own internal ACLs.
(and besides, true protection can only come from outside a program,
e.g. with IPF or PF)
--
Greg A. Woods
Planix, Inc.
<woods@planix.com> +1 416 489-5852 x122 http://www.planix.com/