[arch-general] vsftpd build option --- why not support tcp_wrappers?
Hi, Piotrowski, Do you think it is necessary to add native tcp_wrappers support for VSFTPD? I do not use xinetd, and want restrict FTP accessing by IP. I have checked the current PKGBUILD script, and found currently no tcp_wrappers support available. Do you agree with me ?
From here, https://security.appspot.com/vsftpd/FAQ.txt Q) Help! Does vsftpd support IP-based access control? A1) Yes. vsftpd can integrate with tcp_wrappers (if built with this support). It is enabled with the setting "tcp_wrappers=YES". A2) Yes. vsftpd can be run from xinetd, which supports tcp_wrappers integration.
[2013-11-28 11:19:09 +0800] Yi Zheng:
Do you think it is necessary to add native tcp_wrappers support for VSFTPD?
No. See: https://www.archlinux.org/news/dropping-tcp_wrappers-support/
I do not use xinetd, and want restrict FTP accessing by IP.
I would personally use iptables for that. You can write rules yourself or have other tools (mostly GUI) write them for you. See for instance: https://wiki.archlinux.org/index.php/Firewalls https://wiki.archlinux.org/index.php/Simple_Stateful_Firewall -- Gaetan
participants (2)
-
Gaetan Bisson
-
Yi Zheng