[prev in list] [next in list] [prev in thread] [next in thread] 

List:       debian-devel
Subject:    Re: Debian openssh option review: considering splitting out GSS-API key exchange
From:       Colin Watson <cjwatson () debian ! org>
Date:       2024-04-02 10:51:28
Message-ID: ZgvjMHLsTbDEUNN1 () riva ! ucam ! org
[Download RAW message or body]

On Tue, Apr 02, 2024 at 12:04:26PM +0200, Marco d'Itri wrote:
> Yes, people. I object to removing TCP wrappers support since the patch 
> is tiny and it supports use cases like DNS-based ACLs which cannot be 
> supported by L3 firewalls.

I suspect OpenSSH upstream would also want me to point out that
DNS-based ACLs are supported by Match blocks without needing a separate
library.

-- 
Colin Watson (he/him)                              [cjwatson@debian.org]

[prev in list] [next in list] [prev in thread] [next in thread]