Maybe it's time to get rid of tcpwrappers/tcpd?

[Richard W.M. Jones]

On Thu, Mar 20, 2014 at 10:48:53PM +0200, Oron Peled wrote:
> 
> On Thursday 20 March 2014 19:45:32 Lennart Poettering wrote:
> > No. systemd is not a firewall. It currently supports libwrap checks for
> > socket activated services. And I'd really like to get rid of that...
> 
> Confession: I've never bothered looking in tcpwrappers code/api, so
> I'll take your assessment that this code should be thrown away...

I did just look at the code, and it doesn't look too bad to me.  I'd
be interested hearing about specific problems with it.

  http://gitweb.dragonflybsd.org/dragonfly.git/tree?f=contrib/tcp_wrappers

On the other hand, I'll note that Arch dropped tcp_wrappers support in 2011.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-top is 'top' for virtual machines.  Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://people.redhat.com/~rjones/virt-top