INND bug (feature)

Przemyslaw Maciuszko sal at tpi.pl
Sun Jul 16 19:21:18 UTC 2000


Recently I've put a INND to run corporate internal news-server.
I gave access to it for few persons restricting it to few IPs in nnrp.access
It looked like that:
10.xxx.xxx.xxx/8:login1:pass1:some.group
195.xxx.xxx.xxx/24:login2:pass2:some.other.group
etc.
I couldn't believe when recently I've logged onto bad account.
I mean from the IPs 195.xxx.xxx.xxx I've logged onto login1.
It seems that nnrpd reads the first field and when it gets correct IP it
reads whole nnrp.access for a login and password.
Is it correct ?
Rather not.


Przemyslaw Maciuszko
TP Internet




More information about the inn-workers mailing list