IP Accounting and Access Lists with Systemd
Many moons ago, support for TCP wrappers was removed from systemd -- and, a bit later, OpenSSH, IIRC. Fine, I understand. Personally, I still like tcpd (it&#x27;s an extra layer) and I still use it... but I realize that not very many others do. Okay, I can live with this decision.<p>Then, about two weeks ago, Red Hat decides they&#x27;re gonna deprecate TCP wrappers, with a Red Hat employee saying:<p>&gt; <i>TCP wrappers is a simple tool to block incoming connection on application level. This was very useful 20 years ago, when there were no firewalls in Linux. This is not the case for today and connection filtering should be done in network level or completely in application scope if it makes sense.</i><p>Okay, fine. I still think it&#x27;s useful as an extra layer but, nobody really uses it so, sure, let&#x27;s get rid of it. I&#x27;m on board.<p>Now, all of a sudden, this functionality shows up in systemd (announced yesterday)?<p>Really!? This is (one of the) reason(s) why some of us greybeards loathe systemd (and just when I was starting to become &quot;okay&quot; with it, too).