Hello, <br><br>i am using xinet.d to start nnrpd with SSL on port 563, each time client will connect i will get this message :<br><br>Jun 21 22:26:01 sx1 nnrpd[31698]: localhost.localdomain times user 0.000 system 0.004 idle 0.000 elapsed 0.016<br>
Jun 21 22:26:23 sx1 nnrpd[31764]: starttls: TLSv1 with cipher AES128-SHA (128/128 bits) no authentication<br>Jun 21 22:26:24 sx1 nnrpd[31764]: ? reverse lookup for <a href="http://213.194.242.198">213.194.242.198</a> failed: reverse lookup validation failed -- using IP address for access<br>
<br> <a href="http://213.194.242.198">213.194.242.198</a> actually is my net interface IP address and host works<br><br>[root@sx1 pdg-1.2]# host <a href="http://213.194.242.198">213.194.242.198</a><br>198.242.194.213.in-addr.arpa domain name pointer <a href="http://gw.cz.polarion.com">gw.cz.polarion.com</a>.<br>
<br>So , why i am getting this message, and how can i solve it?<br><br>Thanks!<br><br>David<br><br><br><div class="gmail_quote">On Wed, Jun 11, 2008 at 11:25 PM, Julien ÉLIE <<a href="mailto:julien@trigofacile.com">julien@trigofacile.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi David,<div class="Ih2E3d"><br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
speaking about SSL, how can turn on nnrpd with -S and -p 563 when using a<br>
distribution rpm (CentOS5.1) with /etc/init.d/innd script (which seems to<br>
calls rc.news script).<br>
</blockquote>
<br></div>
<a href="http://www.eyrie.org/%7Eeagle/software/inn/docs/install.html#S14" target="_blank">http://www.eyrie.org/~eagle/software/inn/docs/install.html#S14</a><br>
<br>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<br>
If you wish to use TLS/SSL for your readers, you need to start a second nnrpd to<br>
listen to these connections to NNTPS port 563 and put something like that in your<br>
init scripts:<div class="Ih2E3d"><br>
<br>
su news -c '/usr/local/news/bin/nnrpd -D -c /usr/local/news/etc/readers-ssl.conf -p 563 -S'<br>
<br></div>
where readers-ssl.conf is the file which indicates whether a given connection<br>
is allowed to read and post news (you can also use the previously created readers.conf<br>
file to handle TLS/SSL connections). Note that a news client which supports the STARTTLS<br>
command can also use the conventional NNTP port 119 to initiate a TLS connection.<br>
However, such clients are not widespread yet.<br>
<br>
In the shutdown section of the init script, you can put:<br>
<br>
start-stop-daemon --stop --name nnrpd --quiet --oknodo<br>
<br>
or if you do not have a start-stop-daemon utility:<br>
<br>
su news -c 'killall nnrpd'<br>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<div class="Ih2E3d"><br>
<br>
<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Is there a way to configure it through config files in /etc , or need to<br>
change something for nnrpd, i have check init.d scripts and they do not<br>
contain any mentioning about nnrpd.<br>
</blockquote>
<br></div>
I think it answers your question.<br><font color="#888888">
<br>
-- <br>
Julien ÉLIE<br>
<br>
« -- Ils transportent une arme secrète dans un tonneau !<br>
-- La cervoise tiède !!!<br>
-- Non, ça c'est une arme connue. » (Astérix)<br>
<br>
</font></blockquote></div><br>