Visit Our UNIX and Linux User Community


Tcp wrapper


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users Tcp wrapper
# 15  
Old 07-31-2002
Try this

/etc/hosts.deny
-------------------------
ALL:ALL


/etc/hosts.deny
---------------------------
ALL: 192.168.0.0/255.255.0.0



If that works, then that means it may be the designation for in.ftpd that is setup incorrectly.
# 16  
Old 08-01-2002
Error

The solution require proper configuration in hosts.allow & hosts.deny, but that alone will NOT overcome this problem. I know of only 2 ways to overcome this...

1) Install TCP Wrappers IPv6 (tcp_wrappers_7.6-ipv6.tar.gz)

2) Or change /etc/inetd.conf - by changing all occurrances of the following...

============================================

tcp6 --> tcp (see example below)
------------------------------------------
FROM:
ftp stream tcp6 nowait root /usr/sbin/in.ftpd in.ftpd
TO:
ftp stream tcp nowait root /usr/local/bin/tcpd /usr/sbin/in.ftpd -l


udp6 --> udp (see example below)
------------------------------------------
FROM:
tftp dgram udp6 wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot
TO:
tftp dgram udp wait root /usr/local/tcpd in.tftpd -s /tftpboot

============================================

Since there is (in most cases) no need for IPv6, I prefer option #2.

Benefiting from IPv6 means that you replace all the company's network equipment with IPv6 compatiples (i.e. since everything that is not IPv6 will not handle it) ... and this can be rather expensive.

The Solaris OE comes with IPv6 capability, but the benefits of having this in Solaris will probably not be seen for a few years to come, as networking equipment gets replaced by either attrition, necessity, or a extra income that the company doesn't know what to do with... Smilie
# 17  
Old 08-01-2002
To keep in line with your inetd.conf format, I should probably change the one example to...

udp6 --> udp (see example below)
------------------------------------------
FROM:
tftp dgram udp6 wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot
TO:
tftp dgram udp wait root /usr/local/tcpd /usr/sbin/in.tftpd -s /tftpboot
# 18  
Old 08-01-2002
mslightn:

Don't do that. TCP wrappers, when used through inetd.conf, only work for services using the TCP protocol. By doing the above, you have probably broken his tftp server, which uses the udp protocol.

Please note, udp services can use the tcp libraries and hosts.allow/hosts.deny, however, it cannot be done through inetd.conf like you stated in your example above. It must be coded directly into the service (like UCD-SNMP for example).
# 19  
Old 08-01-2002
There's no need to make an issue of this...

But for hassan2's sake, the following are excerps from the TCP Wrapper README file:

===========================================

1 - Introduction
----------------

With this package you can monitor and filter incoming requests for the SYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other network services.

It supports both 4.3BSD-style sockets and System V.4-style TLI. Praise yourself lucky if you don't know what that means.

...

===========================================

This is also stated in the man pages (`man tcpd`)...

** Most importantly, I have tested this.

hassan2 - this works very well, so don't let anyone daunt your efforts on this. You're on the right track.
# 20  
Old 08-07-2002
Thanks everyone I finally got tcp wrappers working by installing

tcp_wrappers_7.6-ipv6.tar.gz for ipv6

and modifying inetd.conf

Thanks again

Previous Thread | Next Thread
Test Your Knowledge in Computers #248
Difficulty: Easy
ARPANET was designed to reliably transmit 911 messages, and to inform the host computer when it loses a message.
True or False?

10 More Discussions You Might Find Interesting

1. Solaris

Too much TCP retransmitted and TCP duplicate on server Oracle Solaris 10

I have problem with oracle solaris 10 running on oracle sparc T4-2 server. Os information: 5.10 Generic_150400-03 sun4v sparc sun4v Output from tcpstat.d script TCP bytes: out outRetrans in inDup inUnorder 6833763 7300 98884 0... (2 Replies)
Discussion started by: insatiable1610
2 Replies

2. UNIX for Dummies Questions & Answers

Linux printer wrapper

Have an HP 1000 j110a on Slackware 13.0. Is there a wrapper I could use with or without CUPS to allow me to print to this device? I am aware of HPLIP and HPIJS both of which are included in 13.37 release I will be ordering but need something until it is delivered. (0 Replies)
Discussion started by: slak0
0 Replies

3. UNIX for Dummies Questions & Answers

What is a wrapper?

Hi, I am a dummy and hear to the computation guys telling me, "Oh! that is easy, you just write a wrapper to do all that bunch of stuff!" :cool: Could someone tell me what is a wrapper? :rolleyes: The only one I know is Cling-Wrap for sandwiches. A small elegant example would be very... (1 Reply)
Discussion started by: genehunter
1 Replies

4. Shell Programming and Scripting

Count script wrapper help

I have this a code that I got help with for another task. I since tried to modify it to work on this task. I need someones expertise to modify it slightly and I am not sure where to start or yet fully understand the logic. I am trying to get a script to read my m-names.txt which has lots... (19 Replies)
Discussion started by: richsark
19 Replies

5. Shell Programming and Scripting

wrapper script in perl

Hi, I am in need of way to facilitate this senerio in a perl script. I have CLI ( command line interface) which I run like so: kip-tepltist -u Xxx -p Xxx Which produces tones of names from each template it found: 194Iselin-NJ 33-IDFLB-North-611-Woodward-8600 ... (5 Replies)
Discussion started by: richsark
5 Replies

6. UNIX for Dummies Questions & Answers

SSH/SSL wrapper

My IRC client does not support SSL, so I was wondering if there was any other way to encrypt the information between SSL clients on an IRC network, maybe by using SSH to enter the IRC program or something (it's a command-line program) and passing all the plain-text through SSH first. I tried... (0 Replies)
Discussion started by: guitarscn
0 Replies

7. Shell Programming and Scripting

Help with a wrapper script not working

Hello, I have the below wrapper script: #!/usr/bin/perl -w if ($^O eq 'MSWin32' ) { $subnet = 'c:\path\to\subnet.txt'; } else { $subnet = '/opt/qip/wrapper-del-sub'; } open FH1, 'jj-deleted-subnets.txt' or die "Can't open 'jj-deleted-subnets.txt' ... (0 Replies)
Discussion started by: richsark
0 Replies

8. UNIX for Dummies Questions & Answers

Writing a wrapper

Hi everyone, I have this custom sudo package over which I want to write a wrapper using PERL. The wrapper will do some pre-work and then call the regular sudo package from within itself. But I am facing a peculiar problem here. Once invoked, I am able to do the pre-work from within the... (1 Reply)
Discussion started by: garric
1 Replies

9. UNIX for Dummies Questions & Answers

What is a wrapper script

I tried searching the forum ,,but couldn't locate ..Can anyone give me a link or some information about wrapper script. (1 Reply)
Discussion started by: thana
1 Replies

10. Shell Programming and Scripting

wrapper for Common Tools

Hi All, I have bunch of different versions of generic tools (like gcc, gdb, ddd etc) and these tools are compiled for different platforms (linux, solaris...) I would like to mount all these tools into some common place (like /nfs/tools/bin) and have the wrapper to pull the latest version of the... (2 Replies)
Discussion started by: cantgetname
2 Replies

Featured Tech Videos