On Don, 2007-11-15 at 14:41 +0200, John Hay wrote:
> On Thu, Nov 15, 2007 at 12:59:28PM +0100, Bernd Petrovitsch wrote:
[...]
> > And it's not necessary to throw the current implementations out. While
> > I'm a big fan of "one problem, one solution" I can live with "legacy
> > code" and have some (possibly years long) migration phases.
> 
> The code in the http plugin seems to be more comprehensive than the
> others that I have looked at. Maybe one should IPv6ify that and make if
> somehow available for the other plugins to use?

Yes, that would probably be the best solution if we want to keep that
feature in-tree.

> > > Add the tcp_wrappers lib to the firmware image if you need the
> > > filtering. Chances are that it's already there[0] (inetd, xinetd, ssh
> > > use it IIRC and there are other daemons and programs too).
> > > ----  snip  ----
> > > {4}ls -alsL /usr/lib/libwrap.so.0
> > > 36 -rwxr-xr-x 1 root root 32856 Apr 18  2007 /usr/lib/libwrap.so.0*
> > > ----  snip  ----
> > > On i686 it is not that large.
> > > And one can always link statically against it (but if you have more
> > > plugins, you get the code more often - heck, that's one of the reason
> > > for shared libs).
> 
> FreeBSD ship standard with libwrap, so that is also a reasonable solution.

Thanks. Good. Actually I expected that;-)

	Bernd
-- 
Firmix Software GmbH                   http://www.firmix.at/
mobil: +43 664 4416156                 fax: +43 1 7890849-55
          Embedded Linux Development and Services




