Re: only_from

>I am using xinetd Version 2.3.4 libwrap loadavg on a Debian 
>box to run exim.
>
>However, I experienced that not all IPs are actually working. 
>Only a certain number of IPs is actually allowed to access. I
>assume that there is a hardcoded limit on the number of IPs? 

As far as I know, xinetd makes a linked list and walks it from
top to bottom. Because its a linked list, it can grow to any
size. You should know that there were serious issues with
only_from that were fixed in 2.3.6. I would not trust xinetd <
2.3.12 for anything that must be robust, either.

You should be able to dump (SIGUSR1) xinetd's configuration to
see if all 300 made it in. If they are, it should work...assuming
you are running a newer version of xinetd.

As far as the config file, only_from uses the += operator so you
can have multiple only_from statements within the same service.
This lets you format it for easy reading.

>Since my version of xinetd is compiled with libwrap 
>support, would it be a better option to use hosts.allow 
>/ hosts.deny for access control? 

libwrap does a better job of trying to determine that a
connection is really who it says it is. It does both a forward
and reverse lookup. It is slower though since it does both.

>Is there a limit for these files?

No. However, it parses the whole file each time a connection is
made. This also slows things down.

Hope this helps...
-Steve Grubb

__________________________________
Do you Yahoo!?
Find out what made the Top Yahoo! Searches of 2003
http://search.yahoo.com/top2003