Re: IDENTD

[hobbit @ bronze . lcs . mit . edu (*Hobbit*)]

> Spoofing one client connection is something; spoofing
> both client and IDENT connections should be considerably harder.

You could even wire the "known" client IDENTDs to return some magic
cookie instead of the username, and put "cookie @
 host" in your allow file.
The attacker who managed to spoof the identd lookup and jam in
"targetuser" instead of "cookie" would lose.

Still STO, but hey...

_H*