UNIX for Dummies Questions & Answers

Hi,

This is not the usual "unable to telnet to my machine" post. I:

* have ensured that in.telnetd is started from inet.conf

* that hosts.allow/deny are correctly configured

* in.telnetd is listening, and on the correct port

When I check my syslog i notice that tcpd (as I have in.telnetd running under tcp_wrappers) has 10 seperate entries (with ten seperate PIDs) proclaiming "exit status 1".

I am assuming that this is in.telnetd exiting in error. I cannot telnet to myself.

I have a hunch that this might be concerned with verifying the calling host

Now, my question is this: does in.telnetd (or tcp_wrappers for that matter) attempt to do some kind of DNS lookup on the calling host to verify the entry in hosts.allow/deny?

Can I put IP addresses in hosts.allow/deny to avoid this DNS lookup or otherwise turn it off?

Anyone else got any ideas?

Thankyou very much in advance!

You can put IP addresses in the hosts.deny/allow. Same format as you would use for hostnames. tcpd will try to do a reverse lookup on any IP that connects. Ensure that your dns is functioning properly.

Yes. You must have your DNS configured properly.
You can set up ranges of IP's that are allowed.
For instance, if you want to allow all telnet
and ftp requests from your internal network,
you can...

in.telnetd: LOCAL, 192.168.254.
in.ftpd: LOCAL, 192.168.254.


Or allow all SSH requests from anywhere...

sshd: ALL

:-)