Xref: utzoo news.software.b:6410 news.software.nntp:985 alt.sys.sun:2340
Path: utzoo!utgpu!watserv1!watmath!att!bu.edu!shelby!apple!usc!sdd.hp.com!spool2.mu.edu!news.cs.indiana.edu!rutgers!rochester!kodak!ispd-newsserver!dcox
From: dcox@ssd.kodak.com (Don Cox (253-7121))
Newsgroups: news.software.b,news.software.nntp,alt.sys.sun
Subject: Re: nntp question
Message-ID: <1990Dec16.001109.14439@ssd.kodak.com>
Date: 16 Dec 90 00:11:09 GMT
References: <1990Dec12.223017.24545@ssd.kodak.com>
Sender: news@ssd.kodak.com
Distribution: na
Organization: Eastman Kodak
Lines: 58

<I have installed Cnews with nntp on our news-server.  I have in the
<nntp_access file the following:
<default xmit no
<
<This tells me that unless a machine is defined in the nntp_access file,
<they can only transfer files and can not post.  This is true ONLY IF the
<machine is in the /etc/hosts file on the YP master.  For example,
<my machine, tweety, is in the /etc/hosts of the YP master, and another
<machine, granny, is not.  Neither machine is in the nntp_access file.
<
<When I execute the following command from tweety:
<telnet news-server 119
<I am told that posting on the nntp port IS NOT permitted.  When I
<try the same command from granny (NOT in the /etc/hosts file):
<telnet news-server 119
<I am told that posting IS permitted.  Why didn't the default of no
<posting tell granny the same as it did tweety?

Nothing like replying to your own original message  :=).  The problem
was in my nntp_access file.  

As stated in /nntp/services/README:

     "The file "access_file" is the file which tells the news server
which hosts can read, which can post, and which can transfer.
...  Further, remember that the entry "default" must be first in
the table."

My nntp_access file looked like:

#
# format host/net/*domain.suffix   read/xfer/no  post/no  newsgroups
#
# nntpd access file
#

default xfer no
..

The blank line (between the pound sign and the default statement) was
causing all of the problems.  Once I removed the blank line, the nntp
port (119) on my news-server was secure again.  I also changed the line to:

default no no

and then gave xfer permissions to the sites that I feed news to.
Now, unless a machine is defined in my nntp_access file, they will get
a "connection refused" when trying to access port 119.

Sorry for the confusion, and I hope that this will be the solution for
those who e-mailed me with the same concern.

Thanks.
-- 
                  Don Cox
Phone (716) 253-7121      KMX (716) 253-7998
INTERNET    dcox@ssd.kodak.com
When an eel bites your leg, and the pain makes you beg, that's a moray!