I have in my organization varied OS types (AIX,RHEL,Solaris)
My need was to block ftp connections from some addresses on my organization,
but to not disable the protocol.
In the linux servers i did that with the hosts.deny file that used by the vsftpd deamon.
In my AIX servers, i have the simple ftp protocol that not support hosts.deny and hosts.allow files.
I read on the internet about the TCP Wrapper that can implement this function and cause the tcpd refers the hosts.deny & hosts.allow files.
I tried to install TCP Wrappers on my AIX test machine by this link:
'http://www.ibm.com/developerworks/aix/library/au-tcpwrapper/index.html'
and it does not work right.
When I write rule in the hosts.deny like:
or
The rule works and the connections are blocked.
but when I write the rule with spesific host, the rule doesn't work and the connection is possible .
Thank you all.
Moderator's Comments:
Please use code tags next time for your code and data.
Last edited by zaxxon; 08-28-2012 at 06:17 AM..
Reason: code tags
How do you specify the hosts, by IP address or name? If by name, do you use a name that can be resolved?
Try to log in from one of those hosts you want to be denied and do a who am i and check, if this is the same hostname (maybe FQDN or not), that is in your rule. I would try using exact that hostname that who am i shows.
If it still does not work, try to filter by IP address.
again, to focus the problem, the files works when i put ALL arguments but when i write a specific hostname or IP or FQDN unfortunately, it doesnt work...
hi all
just installed the netsec.options.tcpwrapper from expansion pack, which used to be a rpm, for my aix 6.1 test box.
it is so unpredictable. i set up the hosts.deny as suggested for all and allow the sshd for specific ip addresses/hostnames.
the tcpdchk says the hosts allowed and... (0 Replies)
I am try to tuning a parameter in AIX 5L and 6 (for performance issue.)
I find a link(https://forums.oracle.com/forums/thread.jspa?threadID=886358)
The thread mention two parameter below, I can use "ndd" command to tuning.
tcp_deferred_ack_interval = 2
tcp_deferred_ack_max = 2
but I... (3 Replies)
May I know what is the TCP/UCP port range for any default AIX NFS? Based on rpcinfo -p, I got the following output:
program vers proto port service
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100000 4 ... (4 Replies)
I'm using vsftpd which is being controlled by inetd.
I have a user that I want to only be able to connect from one specific IP address on the same internal network so I can backup files on a separate system.
Is this possible with TCP wrappers? I got the notion that it was because of a few... (4 Replies)
Looking at /etc/services on AIX 6.1, I noticed some bizarre port numbers which exceed the 16-bit maximum port number for TCP (i.e. they are higher than 65535.)
sco_printer 70000/tcp sco_spooler # For System V print IPC
sco_s5_port 70001/tcp lpNet_s5_port ... (5 Replies)
With things installed and wrapping ftpd on AIX 5.1 in hosts.deny I have;
ALL: ALL
in hosts.allow;
ftpd: x.x.x.x
ALL: x.x.x.x
I get this on connect via ftp;
421 Service not available, remote server has closed connection
So its working as far as blocking but the hosts.allow seems to be... (1 Reply)
has anyone ever tried using a client list in thier hosts.allow file
Example of hosts.allow) in.ftpd: /etc/ftp.hosts
"ftp.hosts" has my list of IP address that are allow access....
However I cant get this work...Any Comments or Help? (0 Replies)
I want to log tcp-wrapper events Solaris 10. I researched and saw that I could make a syslog entry in the hosts.deny, which I did below. After restarting syslog and having ssh blocking, I see nothing logging. I also do not get the email that should be generated. The file was taken from a... (2 Replies)
I am having a problem and I feel it's network related. I have an RS6000 running AIX. I use a terminal emulation program that allows me to connect to my server via TCP/IP. When I try and make the connection, it takes F-O-R-E-V-E-R to get a login prompt on the screen.
I also cannot ftp to... (3 Replies)
I have installed TCP wrappers , Good package ...
I have a problem with the hosts_options part ...
I am not able to use the twist command .. It just dosent respond
I have compiled wrappers 7.6 for Solaris 8 with ipv6 support ...
Everything works fine except the twist doesnt work
I have... (1 Reply)