From 4f9f6794c599c67c6ae6647ab5820cd1e36fca0d Mon Sep 17 00:00:00 2001
From: Darren Tucker <dtucker@zip.com.au>
Date: Wed, 28 Jan 2004 12:26:14 +1100
Subject:  - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by
 tim@

---
 ChangeLog              |  5 ++++-
 regress/README.regress | 10 +++++++++-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 50acfb04e..4d54861c1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+20040128
+ - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by tim@
+
 20040127
  - (djm) OpenBSD CVS Sync
    - hshoexer@cvs.openbsd.org 2004/01/23 17:06:03
@@ -1762,4 +1765,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.3197 2004/01/27 10:22:00 djm Exp $
+$Id: ChangeLog,v 1.3198 2004/01/28 01:26:14 dtucker Exp $
diff --git a/regress/README.regress b/regress/README.regress
index 48048ab12..b479c6c07 100644
--- a/regress/README.regress
+++ b/regress/README.regress
@@ -82,5 +82,13 @@ Failed tests can be difficult to diagnose. Suggestions:
 
 Known Issues.
 
+- If you build with tcpwrappers and try to run the regression tests,
+  your hosts.allow must permit connections from localhost and from
+  "unknown".  This is because some tests are performed via the loopback
+  interface, while others are done with "sshd -i" as a ProxyCommand.  In
+  the latter case, when sshd calls getpeername() on the socket it will
+  fail (because it's not a tcp socket) and will be identified as
+  "unknown", which is then checked against tcpwrappers.
 
-$Id: README.regress,v 1.2 2004/01/26 17:37:09 tim Exp $
+
+$Id: README.regress,v 1.3 2004/01/28 01:26:14 dtucker Exp $
-- 
cgit v1.2.3