mkhaw@teknowledge-vaxc.ARPA (Mike Khaw) (11/19/88)
<2983@ci.sei.cmu.edu>, by pdb@sei.cmu.edu (Patrick Barron): - I'm not sure about other vendors, but Digital will supposedly include fixed - versions of ftpd and fingerd in Ultrix V3.0. fingerd was not included at - all in Ultrix V2.x, and the sendmail in V2.x does not have the DEBUG problem. - The ftpd problem does exist, but with a few minor patches the code posted - to comp.bugs.4bsd.ucb-fixes will work just fine under Ultrix. But don't you lose tcp<->decnet gatewaying if you replace the Ultrix ftpd with the 4.3bsd ftpd? Mike Khaw -- internet: mkhaw@teknowledge.arpa uucp: {uunet|sun|ucbvax|decwrl|ames|hplabs}!mkhaw%teknowledge.arpa hardcopy: Teknowledge Inc, 1850 Embarcadero Rd, POB 10119, Palo Alto, CA 94303
vixie@decwrl.dec.com (Paul Vixie) (11/19/88)
(Patrick Barron) # [Ultrix V3.0 has fixed sendmail/ftpd, V2.X had no SMTPDEBUG or fingerd] (Mike Khaw) # But don't you lose tcp<->decnet gatewaying if you replace the Ultrix ftpd # with the 4.3bsd ftpd? Nope. That's the FAL or something like that. Different program altogether. -- Paul Vixie Work: vixie@decwrl.dec.com decwrl!vixie +1 415 853 6600 Play: paul@vixie.sf.ca.us vixie!paul +1 415 864 7013
pat@orac.UUCP (Pat Barron) (11/20/88)
In article <25914@teknowledge-vaxc.ARPA>, mkhaw@teknowledge-vaxc.ARPA (Mike Khaw) writes: > But don't you lose tcp<->decnet gatewaying if you replace the Ultrix ftpd > with the 4.3bsd ftpd? Yes, you do - if you use that functionality, then you lose, and (for the moment) you get to choose between no DECnet-Internet Gateway FTP, and no anonymous FTP (since the only other fix, until Ultrix V3.0, is to disable anonymous FTP, since DEC won't distribute the source for the DECnet-Internet Gateway and the "official" fix for V3.0-beta is "turn off anonymous FTP"). One other thing, speaking of security problems - there is a HUGE one in the DECnet-Internet gateway. DEC knows about it, and will send you a fix - but only if you ask for it. DON'T run the gateway version of telnetd until you get the fix. I won't post the problem here, but will describe it if you send me mail. Follow-ups to comp.unix.ultrix, please. --Pat.