[distcc] ip-based access control
Martin Pool
mbp at sourcefrog.net
Tue Jan 28 13:55:38 GMT 2003
I've just checked in to CVS a simple system for distccd access control
based on client IP. It works from either inetd or standalone, and
should give some reassurance to people who run distcc on a
mostly-trusted network, behind some kind of firewall or ingress
filter.
Obviously this is not enough to protect against truly determined
attackers, including those who can spoof or snoop your network -- that
will have to wait for ssh transport.
Basically just
distccd --allow 192.168.0.0/16
Please test -- it's in either CVS or a snapshot tarball.
--
Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/distcc/attachments/20030129/9c8d4d16/attachment.bin
More information about the distcc
mailing list