Access to NNTP resources is governed by the file
nntp_access in /etc/news. Lines
in this file describe the access rights granted to foreign hosts. Each line
has the following format:
site read|xfer|both|no post|no [!exceptgroups] |
If a client connects to the NNTP port, nntpd attempts to
obtain the host's fully qualified domain name from its IP address using reverse
lookup. The client's hostname and IP address are checked against the
site field of each entry in the order in which they
appear in the file. Matches may be either partial or exact. If an entry
matches exactly, it applies; if the match is partial, it applies only if there
is no other match following it that is at least as good.
site may be specified in one of the following ways:
- Hostname
This is a fully qualified domain name of a host. If this matches the client's
canonical hostname literally, the entry applies, and all following entries are
ignored.
- IP address
This is an IP address in dotted quad notation. If the client's IP address
matches this, the entry applies, and all following entries are ignored.
- Domain name
This is a domain name, specified as
*.domain.
If the client's hostname matches the domain name, the entry matches.
- Network name
This is the name of a network as specified in
/etc/networks. If the network number of the client's
IP address matches the network number associated with the network name, the
entry matches.
- Default
The string default matches any client.
Entries with a more general site specification should be specified earlier,
because any matches will be overridden by later, more exact matches.
The second and third fields describe the access rights granted to the
client. The second field details the permissions to retrieve news by pulling
(read), and transmit news by pushing
(xfer). A value of
both enables both;
no denies access
altogether. The third field grants the client the right to post
articles, i.e., deliver articles with incomplete header information,
which is completed by the news software. If the second field contains
no, the third field is ignored.
The fourth field is optional and contains a comma-separated list of groups to
which the client is denied access.
This is a sample nntp_access file:
#
# by default, anyone may transfer news, but not read or post
default xfer no
#
# public.vbrew.com offers public access via modem. We allow
# them to read and post to any but the local.* groups
public.vbrew.com read post !local
#
# all other hosts at the brewery may read and post
*.vbrew.com read post |
