[distcc] ip-based access control

Martin Pool mbp at sourcefrog.net
Tue Jan 28 13:55:38 GMT 2003


I've just checked in to CVS a simple system for distccd access control
based on client IP.  It works from either inetd or standalone, and
should give some reassurance to people who run distcc on a
mostly-trusted network, behind some kind of firewall or ingress
filter.

Obviously this is not enough to protect against truly determined
attackers, including those who can spoof or snoop your network -- that
will have to wait for ssh transport.

Basically just

  distccd --allow 192.168.0.0/16

Please test -- it's in either CVS or a snapshot tarball.

-- 
Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/distcc/attachments/20030129/9c8d4d16/attachment.bin


More information about the distcc mailing list