[Nut-upsuser] One little thing not quite correct in my configuration
clepple at gmail.com
Wed Sep 9 23:49:19 UTC 2009
On Wed, Sep 9, 2009 at 11:16 AM, James Moody <moody at pfcusa.org> wrote:
> Are there other entries I need to add? All I want to do at this point is
> verify that 'upsc cyber' will work.
I forgot that 2.2.2 still required ACCEPT/REJECT:
'Any IP address which does not match one of your directives will default
to REJECT. This is intended to keep your system safe if you forget to
put "REJECT all" at the bottom.'
The LISTEN directive limits connections at the kernel level, and
ACCEPT/REJECT are handled inside the NUT code. (The LISTEN directive
was also phased in after ACCEPT/REJECT.)
If you upgrade, note that current NUT now uses tcp_wrappers instead of
ACCEPT/REJECT. Similar functionality, but provided by a more
widely-known (and hopefully more secure) library.
- Charles Lepple
More information about the Nut-upsuser