Re: [mosquitto-dev] tcp-wrappers support

[Andy Piper <andypiperuk@xxxxxxxxx>]

I think I probably used this back in the very early days, but not for a long long time (and I have typically run on Ubuntu, so if I wasn't compiling myself then I may have had that feature).

I don't have an objection and I fully agree with your reasoning; (stating the obvious) it might be good to pre-warn / solicit feedback from those packagers who currently compile it in.

On Mon, Sep 19, 2022 at 1:46 PM Roger Light <roger@xxxxxxxxxx> wrote:

Dear all,

Mosquitto has had support for tcp-wrappers/libwrap for a long while.
It is not compiled in by default, but some packages such as the Ubuntu
ones provided by the project do include support.

If you aren't familiar, tcp-wrappers is a very old program/library
that allows you to do IP/hostname based access control in a network
service by adding entries to the /etc/hosts.allow and /etc/hosts.deny
files that apply to that service. This kind of control is now much
better deployed at the firewall level. I don't believe that anyone has
used it in any kind of meaningful way for a long time, and
particularly not for mosquitto.

I propose completely removing support for tcp-wrappers from mosquitto.
If you'd like to object, now is your chance. I'm happy to hear good
reasons why it should stay.

Regards,

Roger
_______________________________________________
mosquitto-dev mailing list
mosquitto-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/mosquitto-dev

--

Andy Piper | Kingston upon Thames, London (UK)
links: https://andypiper.me  | twitter: @andypiper