Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "David Luyer" <david@luyer.net>
To: 'Antony Stone' <Antony@Soft-Solutions.co.uk>, netfilter@lists.samba.org
Subject: RE: TCP delay, solved
Date: Fri, 14 Jun 2002 17:15:02 +1000	[thread overview]
Message-ID: <01b801c21373$340fe960$638317d2@pacific.net.au> (raw)
In-Reply-To: <200206131205.NAA07068@slate.rockstone.co.uk>

[ ident lookups causing tcpd to be slow ]

> There's no satisfactory answer to this problem at present, I think.

umm, reading the manual?

man 5 hosts_access [on Debian Linux at least]

CLIENT USERNAME LOOKUP
       When  the client host supports the RFC 931 protocol or one
       of its descendants (TAP, IDENT, RFC 1413) the wrapper pro--
       grams  can retrieve additional information about the owner
       of a connection. Client username information, when  avail--
       able,  is  logged  together with the client host name, and
       can be used to match patterns like:

          daemon_list : ... user_pattern@host_pattern ...

       The daemon wrappers can be configured at compile  time  to
       perform  rule-driven  username  lookups  (default)  or  to
       always interrogate the client host.  In the case of  rule-
       driven  username lookups, the above rule would cause user--
       name  lookup  only  when  both  the  daemon_list  and  the
       host_pattern match.

So it's a compile option on tcpd.  Recompile with it disabled.

David.



  reply	other threads:[~2002-06-14  7:15 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <20020612154553.GI10747@hack.home.theunixman.com>
2002-06-12 16:33 ` TCP delay, solved Nathan Cassano
2002-06-12 20:02   ` Antony Stone
2002-06-13  9:59     ` Juri Haberland
2002-06-13 12:05       ` Antony Stone
2002-06-14  7:15         ` David Luyer [this message]
2002-06-14  7:55           ` Antony Stone
2002-06-14  8:17             ` David Luyer
2002-06-14  8:25               ` David Luyer
2002-06-14  9:18                 ` Antony Stone
2002-06-14 20:29                   ` Joe Patterson
2002-06-15  1:21                     ` Joe Patterson
2002-06-14  9:16               ` Antony Stone
2002-06-14 17:28                 ` Tony Earnshaw

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='01b801c21373$340fe960$638317d2@pacific.net.au' \
    --to=david@luyer.net \
    --cc=Antony@Soft-Solutions.co.uk \
    --cc=netfilter@lists.samba.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox