AIX

Hi,

I have in my organization varied OS types (AIX,RHEL,Solaris)
My need was to block ftp connections from some addresses on my organization,
but to not disable the protocol.
In the linux servers i did that with the hosts.deny file that used by the vsftpd deamon.
In my AIX servers, i have the simple ftp protocol that not support hosts.deny and hosts.allow files.
I read on the internet about the TCP Wrapper that can implement this function and cause the tcpd refers the hosts.deny & hosts.allow files.

I tried to install TCP Wrappers on my AIX test machine by this link:
'http://www.ibm.com/developerworks/aix/library/au-tcpwrapper/index.html'

and it does not work right.

When I write rule in the hosts.deny like:

Code:

ALL:ALL

or

Code:

ftpd:ALL

The rule works and the connections are blocked.

but when I write the rule with spesific host, the rule doesn't work and the connection is possible .

Thank you all.

Moderator's Comments:

Please use code tags next time for your code and data.

How do you specify the hosts, by IP address or name? If by name, do you use a name that can be resolved?
Try to log in from one of those hosts you want to be denied and do a who am i and check, if this is the same hostname (maybe FQDN or not), that is in your rule. I would try using exact that hostname that who am i shows.
If it still does not work, try to filter by IP address.

Hi zaxxon,
thanks for your reply.

I tried all of this: IP address, FQDN, short hostname.

when I do

Code:

who am i

it's shows the PC that i logged in and not the FQDN of the server:

Code:

root        pts/5       Aug 26 08:55     (pc74.organization.co.il)

another thing, when i do the ftp connection, i get this message:

Code:

linuxserver1 auth|security:alert ftpd PAM: open_module: stat(/usr/lib/security/pam_uxauth.o) failed: A file or directory in the path name does not exist.

Thanks.

I wrote
If you don't want to deny your PC, then log in from one of those other hosts.

OK..
any help ?

What's "ok", did you try it or not?

yes I tried it... it doesnt work.

again, to focus the problem, the files works when i put ALL arguments but when i write a specific hostname or IP or FQDN unfortunately, it doesnt work...