UNIX for Dummies Questions & Answers

hi, i am on solaris and on a hostname ORASA. i have problems with tcpwrapper... i add the following entry to hosts.deny (ALL:ALL) and then a kill -HUP <pid of inetd>

then i log in to a host, SAPOR. from here, i telnet to ORASA. if tcpwrapper is working correctly, i should not be able to log in right?

what is wrong?

thanks

your hosts.allow file should be empty ie should have no entry in it and hosts.deny file will have
ALL: ALL

Note this will disallow all telnet, ftp session
and the only way you will be to logon is at the console or through ssh if ssh is installed

Finally, you need tcpd entry in your /etc/inetd.conf, tcpd is ussually live in /usr/local/bin/tcpd but could be different in your
machine

for example
To enable your machine to use tcpwapper for telnet
session you need this entry in /etc/inetd.conf

telnet stream tcp6 nowait root /usr/local/bin/tcpd in.telnetd

After changes has been made to /etc/inetd.conf
issue kill -HUP (inetd pid)

what if i want to allow only ip 111.222.333.4 telnet services only?

is it i type ALL:ALL for hosts.deny and telnet:111.222.333.4 for hosts.allow?

thanks

http://www.cert.org/security-improve...s/i041.07.html

download from here.

3) edit the Makefile which is in your unpacked files directory
3.1) add CC=/usr/loca/bin/gcc
3.2) comment REAL_DAEMON_DIR=/usr/libexec
3.3) u need either gcc or cc compiler!
4) make sunos5 (different OS matters here)
4.1) enter make to get a list of available OS
5) after a successful make, copy the programs as belows
$ cp tcpd /usr/sbin

$ cp safe_finger /usr/sbin

$ cp tcpdchk /usr/sbin

$ cp tcpdmatch /usr/sbin

$ cp try-from /usr/sbin

$ cp hosts_access.3 /usr/man/man3

$ cp hosts_access.5 /usr/man/man5

$ cp hosts_options.5 /usr/man/man5

$ cp tcpd.8 /usr/man/man8

$ cp tcpdchk.8 /usr/man/man8

$ cp tcpdmatch.8 /usr/man/man8

6) edit
6.1) hosts.allow (this is from saetra, the new Sun server)
#ALL : ALL
ALL : 127.0.0.1
in.telnetd : list of ips

in.ftpd : list of ips
6.2) hosts.deny
ALL:ALL
7) tcpdchk , tcpdmatch to check the configuration of the files.
7.1) tcpdchk -- to check the entires in the two files
7.2) tcpdmatch - to check the services and the host
example : tcpdmatch in.telnetd list of ips
8) kill -HUP <pid of inetd>