Mailinglist Archive: opensuse-bugs (9915 mails)

< Previous Next >
[Bug 230730] cups: tcp_wrappers refused connection from unknown
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 25 Jan 2007 08:16:52 -0700 (MST)
  • Message-id: <20070125151652.E2593FAB@xxxxxxxxxxxxxxxxxxxxxx>

------- Comment #29 from kssingvo@xxxxxxxxxx 2007-01-25 08:16 MST -------
Ok. I can reproduce it partly (so far). The important hint I got, was no longer
to look through the syslog files and use the cups logfiles.

The bad news is, that I've to tell you that it is _not_ possible to reduce the
large number of same loglines in the cups error_log without removing the tcp
wrapper functionality (or with large effort). The client repeats the connection
attempt many times (because of bad network, etc.) and every attempt is logged
in the file. The server has no possibility to send the client an error message
to stop this behavior (at this phase of communication). Sorry.

Warning! We already discussed this removal in the team, and it will be very
likely that this happens if more errors are detected or the
implementation/maintaining time takes to long: you can block via firewall
functionality too.

The good news (?) is that the logfile will no grow much above the configured
MaxLogSize in /etc/cups/cupsd.conf (or 1 MB as default), and then overwrites
the additional logfile. --> no DOS attack.

I have an idea where the "unknown" results are coming from: cups 1.2 (new in
10.2) has the possibility to use domain sockets and therefore no internet
adress is required. But I need more time to work on this. You might avoid this,
if you always use the hostname instead of "localhost" for connections, e.g. by
setting $CUPSSERVER. (untested) I want to test this out later.

Summarize: I didn't do any fixes, because its an intended behavior so far.

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

< Previous Next >