Subject: Re: DNS-based firewalling?
To: Johnny Billquist <bqt@Update.UU.SE>
From: Markus W Kilbinger <kilbi@rad.rwth-aachen.de>
List: netbsd-users
Date: 01/10/2005 14:58:10
>>>>> "Johnny" == Johnny Billquist <bqt@Update.UU.SE> writes:
>>> Since noone have mentioned /etc/hosts.deny yet, I'll do it.
>>> Simple, you can do it based on hostnames or ip-address ranges,
>>> and while I think you do get through the connect stage, the
>>> port is immediately disconnected again.
>> Hm -> this is a nice way, anyway it only works from inetd.
Johnny> No, I believe it works for all applications, including
Johnny> sendmail/postfix.
... for all applications that are compiled/linked against libwrap
(check with ldd). This seems to be valid for sendmail, but not for
postfix.
Markus.