Page MenuHomeFreeBSD

tcp_wrappers: recognize IPv6 addresses/prefixes
ClosedPublic

Authored by glebius on May 11 2023, 7:11 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Dec 4, 12:42 AM
Unknown Object (File)
Tue, Nov 25, 10:34 AM
Unknown Object (File)
Mon, Nov 24, 8:24 PM
Unknown Object (File)
Sat, Nov 22, 3:23 PM
Unknown Object (File)
Sat, Nov 15, 4:45 PM
Unknown Object (File)
Oct 26 2025, 4:10 PM
Unknown Object (File)
Oct 11 2025, 2:29 PM
Unknown Object (File)
Oct 10 2025, 2:59 PM
Subscribers

Details

Summary

Intentionally or not, but the libwrap was written in such manner that
if your /etc/hosts.allow doesn't have any domain names, neither smart
keywords like LOCAL or KNOWN, then it will not try to resolve the
client address during the hosts check. This was achieved with the
NOT_INADDR() check that matched IPv4 addresses/prefixes. Extend this
to also skip resolve if client list token looks like IPv6.

PR: 269456

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable