Description of problem:
When hitting swat from a remote (non-localhost) IP, swat seems to bail
completely and return no data to the caller.

Version-Release number of selected component (if applicable):
samba-3.0.3-5

How reproducible:
Always

Steps to Reproduce:
1.configure /etc/xinetd.d/swat to accept non-local connections:
 - chkconfig swat on
 - patch /etc/xinetd.d/sat << EOF
--- /etc/xinetd.d/swat  2004-06-15 18:53:51.651159864 -0700
+++ -   2004-06-15 19:26:27.657216000 -0700
@@ -7,7 +7,7 @@
        port            = 901
        socket_type     = stream
        wait            = no
-       only_from       = 192.168.21.0 24.68.22.9
+       only_from       = localhost
        user            = root
        server          = /usr/sbin/swat
        log_on_failure  += USERID

 - service xinetd restart
 - iptables -I INPUT -i eth0 -j ACCEPT
   (eth0 is internal interface, eth1 external, 
    to avoid RPC default-iface security problems)

2.  strace -ff -F -p `pidof xinetd`
3.  on other machine, lynx http://swatbox:901
  
Actual results:
Lynx: "Alert!: Unexpected network read error; connection aborted."
Mozilla: status bar: null document returned or connection errors
IE:  apparently similar output

strace:
select(6, [3 5], NULL, NULL, NULL)      = 1 (in [3])
ioctl(3, FIONREAD, [1])                 = 0
read(3, "\21", 1)                       = 1
waitpid(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG) = 2900
close(-1)                               = -1 EBADF (Bad file descriptor)
waitpid(-1, 0xfef1dd48, WNOHANG)        = -1 ECHILD (No child processes)
select(6, [3 5], NULL, NULL, NULL)      = 1 (in [5])
accept(5, {sa_family=AF_INET, sin_port=htons(3676),
sin_addr=inet_addr("192.168.21.100")}, [16]) = 7
time(NULL)                              = 1087351006
clone(Process 2901 attached
child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0xf70552e8) = 2901
[pid  2865] time([1087351006])          = 1087351006
[pid  2865] close(7)                    = 0
select(6, [3 5], NULL, NULL, NULL
...

Expected results:

 - login required
 - login
 - swat iface

Additional info:

 - logging in via lynx from localhost appeas to work, when
configuration (xinetd, iptables) is set to allow it.

 - grep SELINUX /etc/sysconfig/selinux  (ugh)
   SELINUX=disabled

End Customer (not me) generally disillusioned/disappointed with FC2,
may revert to FC1 or Conectiva/PLD (avoiding MDK/PLD/SuSE/$$$) for
SOHO gateway within short period of time.  Thus, short window of
relevance.  Will advise and close ticket/INVALID if customer moves and
no CCs/MeToos on Bz by then.