1 |
Hello. |
2 |
|
3 |
Can anybody explain the differences, pro/con between the mentioned two |
4 |
approaches in the subject? |
5 |
|
6 |
I thought that fewer programs I have on my server the more secure it is. |
7 |
But gentoo security guide and some people on this list suggest usage of |
8 |
hosts.allow, hosts.deny files, which only work if I have tpcd installed, |
9 |
thus another service which weaken server's security. But normaly each |
10 |
server has iptables installed. So every sysadmin can obtain hosts.allow, |
11 |
hosts.deny functionality with simple iptables rule like the following: |
12 |
|
13 |
iptables -A INPUT -s bad_host -j DROP |
14 |
|
15 |
This is the base functionality of iptables. No PoM is nescesary for such |
16 |
kind of things. |
17 |
|
18 |
More. I think some portable bash script that will parse host.* files and |
19 |
create iptables rules is very simple to write! |
20 |
|
21 |
So why many people and security guides still suggest the use of tcpd |
22 |
over simple iptables rules? |
23 |
|
24 |
Thank you for your time, |
25 |
Peter. |