I checked for ident but it wasn't running so then I started looking for 
something that was trying to use ident. I found that the new ipop3 
service (in /etc/xinetd.d) was configured to with the following:

service pop3
{
        disable = no
        socket_type             = stream
        wait                    = no
        user                    = root
        server                  = /usr/sbin/ipop3d
        log_on_success          += USERID
        log_on_failure          += USERID
}

After looking through the man for xinetd.conf, I changed it to:

service pop3
{
        disable = no
        socket_type             = stream
        wait                    = no
        user                    = root
        server                  = /usr/sbin/ipop3d
        log_on_success          += HOST DURATION
        log_on_failure          += HOST
}

The difference is in the log_on_success and log_on_failure variables. If 
set to USERID, the service calls for a hostname lookup before logging to 
the logfile. If set to HOST, it only logs the host address without the 
lookup.

An added benefit: this is true with any of the xinetd services, ie. ftp, 
imap, etc.

And there's more: the nospoof on setting in the hosts file also sends 
out for a host name lookup. Setting nospoof off solves this problem. If 
you're not using rlogin, it isn't used anyway (Idon't think).

Thanks for your help.

Paul Dubinsky
flxent.com





_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to