#601127 [xinetd] setting 'only_from' to network name as defined in /etc/networks does not work

Package:
xinetd
Source:
xinetd
Description:
replacement for inetd with many enhancements
Submitter:
Petr Gajdůšek
Date:
2010-10-24 15:33:03 UTC
Severity:
normal
#601127#5
Date:
2010-10-23 16:34:16 UTC
From:
To:
--- Please enter the report below this line. ---

Hi,

cat /etc/xinetd.d/samba
service netbios-ssn
{
     port        =    139
     socket_type    =    stream
     wait        =    no
     only_from    =    gajdusek-net
     user        =    root
     server        =    /usr/sbin/smbd
     log_on_failure    +=    USERID HOST
     log_on_success    +=    PID USERID HOST EXIT DURATION
     disable        =    no
     instances    =    5
}

$ cat /etc/networks
default        0.0.0.0
loopback    127.0.0.0
link-local    169.254.0.0
gajdusek-net    192.168

$ LC_ALL=C smbclient -L mrazik.gajdusek -U%
read_fd_with_timeout: timeout read. read error = Connection reset by peer.
Receiving SMB: Server stopped responding
session request to MRAZIK.GAJDUSEK failed (Read error: Connection reset
by peer)
read_fd_with_timeout: timeout read. read error = Connection reset by peer.
Receiving SMB: Server stopped responding
session request to MRAZIK failed (Read error: Connection reset by peer)
read_fd_with_timeout: timeout read. read error = Connection reset by peer.
Receiving SMB: Server stopped responding
session request to *SMBSERVER failed (Read error: Connection reset by peer)

$ tail -n2 /var/log/daemon.log
Oct 23 18:08:22 localhost xinetd[5769]: FAIL: netbios-ssn address
from=192.168.0.1
Oct 23 18:08:22 localhost xinetd[5739]: EXIT: netbios-ssn status=0
pid=5769 duration=0(sec)
--- 192.168.0.1 should be accepted (according to manual 'only_from' section) because it is in gajdusek-net network (192.168.0.0) but obviously it is not accepted. Does not work with loopback network either. Does not matter if INETD_COMPAT is set to Yes or No. If I specify IP address, hostname or domainname (.gajdusek) in only_from everything works as expected. Petr Debian Release: squeeze/sid 500 unstable www.debian-multimedia.org 500 unstable unofficial.debian-maintainers.org 500 unstable ftp.cz.debian.org 500 unstable deb.opera.com 500 stable dl.google.com --- Package information. --- Depends (Version) | Installed ============================-+-============ netbase | 4.42 adduser | 3.112+nmu1 dnsmasq-base (>= 2.55-2) | 2.55-2 Package's Recommends field is empty. Suggests (Version) | Installed =========================-+-=========== resolvconf |