[lug] Bletcherous pipe, FIXME!
Jeffrey Haemer
jeffrey.haemer at gmail.com
Thu Apr 2 14:50:25 MDT 2009
Sigh. Gmail wrapped the comments. Okay, try two.
{
printf "ALL: localhost"
route -n | egrep -v '^(0|169|[A-Z])' | # grab the local
# hosts/masks
while read dest gateway genmask etc; do # turn into
# comma-separated list
printf ", $dest/$gateway"
done
echo # newline on the end
} >> /etc/hosts.allow # tack onto the
# hosts.allow file
On Thu, Apr 2, 2009 at 2:43 PM, Jeffrey Haemer <jeffrey.haemer at gmail.com>
wrote:
> Andrew
>
> I'd find something like this is at least easier to maintain. YMMV.
>
> {
> printf "ALL: localhost"
> route -n | egrep -v '^(0|169|[A-Z])' | # grab the
> local hosts/masks
> while read dest gateway genmask etc; do
> printf ", $dest/$gateway" # turn into
> comma-separated list
> done
> echo #
> newline on the end
> } >> /etc/hosts.allow # tack
> onto the hosts.allow file
>
>
> On Thu, Apr 2, 2009 at 12:55 PM, Andrew Gilmore <agilmore at skybeam.com>
wrote:
>>
>> I discovered this nastiness in something I recommended in a benchmark,
and before I got it published, thought I'd see if anyone cared to try to fix
it...
>>
>> The goal is to generate a sane default hosts.allow tcp wrappers only
allowing hosts on the local networks.
>>
>> printf "ALL: localhost" >> /etc/hosts.allow
>> for I in `route -n |tail -n +3 |sed -e 's/ */ /g'| cut -f1,3 -d ' '
>> --output-delimiter=/ | grep -vE "^(0|169)" |sort -n`; do
>> printf ", $I" >> /etc/hosts.allow;
>> done
>> echo >> /etc/hosts.allow
>>
>> Ouch, I know.
>>
>> Anyone for a game of bash golf? :-)
>>
>> Andrew
>> _______________________________________________
>> Web Page: http://lug.boulder.co.us
>> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug
>
>
>
> --
> Jeffrey Haemer <jeffrey.haemer at gmail.com>
> 720-837-8908 [cell]
> 303-997-1219 [Google Voice]
> http://seejeffrun.blogspot.com
>
--
Jeffrey Haemer <jeffrey.haemer at gmail.com>
720-837-8908 [cell]
303-997-1219 [Google Voice]
http://seejeffrun.blogspot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20090402/579fb457/attachment.html>
More information about the LUG
mailing list