aboutsummaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorSheldon Hearn <sheldonh@FreeBSD.org>2000-05-05 08:31:59 +0000
committerSheldon Hearn <sheldonh@FreeBSD.org>2000-05-05 08:31:59 +0000
commit8172e29086d50c35783cb8d6ac4a55c0f328eb0f (patch)
treed2d1a12ce14fc66deabf965c425f8e82f0710e0d /etc
parent54e00925171a384cb883b878695fa9284681f47b (diff)
downloadsrc-8172e29086d50c35783cb8d6ac4a55c0f328eb0f.tar.gz
src-8172e29086d50c35783cb8d6ac4a55c0f328eb0f.zip
Add IP addresses to the rules required to "Allow anything from
localhost", since portmap(8) is included in "anything". Submitted by: Doug Barton <Doug@gorean.org>
Notes
Notes: svn path=/head/; revision=60031
Diffstat (limited to 'etc')
-rw-r--r--etc/hosts.allow7
1 files changed, 4 insertions, 3 deletions
diff --git a/etc/hosts.allow b/etc/hosts.allow
index fbb20a7e2f51..0cdc4d933e2a 100644
--- a/etc/hosts.allow
+++ b/etc/hosts.allow
@@ -29,9 +29,10 @@ ALL : ALL : allow
# Prevent those with no reverse DNS from connecting.
ALL : PARANOID : RFC931 20 : deny
-# Allow anything from localhost
-ALL : localhost : allow
-ALL : my.machine.example.com : allow
+# Allow anything from localhost. Note that an IP address (not a host
+# name) *MUST* be specified for portmap(8).
+ALL : localhost 127.0.0.1 : allow
+ALL : my.machine.example.com 192.0.2.35 : allow
# Sendmail can help protect you against spammers and relay-rapers
sendmail : localhost : allow