SUMMARY TCP-WRAPPER7.6

From: Bobby Huynh (huynh@c2sism1.monmouth.army.mil)
Date: Fri Sep 05 1997 - 13:12:55 CDT


The answer is simple

Since, I complied tcpwrapper in /usr/local/tcp_wrapper-7.6 directory. It will
created a file "tcpd" in that directory. you SHOULD LEAVE IT THERE rather than
move "tcpd" file to other places. So the inetd.conf shoul be modified as below:

from

ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd

to

ftp stream tcp nowait root /usr/local/tcp_wrapper7.6/tcpd
/usr/sbin/in.ftpd

then

kill -HUP PID

That is the solution.

ORGINAL POST:

>Hi all;
>
>I just completed compile tcp-wrapper 7.6 on Sparc20 os 2.5. However, it is
very difficult to configure tcpwapper to work properly. I have modified
/etc/inet/inetd.conf file
>*******************************************************
>from
>ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd
>to
>ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd
>and
>from
>telnet stream tcp nowait root /usr/sbin/in.telnetd in.telnetd
>to
>telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
>*********************************************************
>I did move some other files such as "tcpd" file from orginal directory where
tcpwrapper binary code installed to /usr/sbin directory and I also moved
"in.ftpd" and "in.telnetd" out to /usr/sbin/tcpwrapper directory as i stated in
Makefile.
>
>I would like to try tcpwrapper by creating two other files and the entry is
>
>/etc/hosts.deny
>ALL: aaa.aaa.aaa.aaa
>and
>/etc/hosts.allow
>ALL: localhost, bbb.bbb.bbb.bbb
>
>When I run command "tcpdmatch in.telnetd bbb.bbb.bbb.bbb" I got access granted
and "tcpdmatch in.telnetd aaa.aaa.aaa.aaa" I got access deny. This is exactly
what I want.
>
>The problems is when telnet from either machine with ip address describe above
to a server where tcpwrapper installed. I got connection close. Even, from
console I telnet to localhost. I still got connection closed.
>
>Could anyone have configured tcpwrapper before please give me some hints how to
correct the problems. I ran out the ideas!!
>
>Thank you for your help.
>
>--Bobby

Thanks to:

a.varvitsiotis@ece.ntua.gr
peter.allan@aeat.co.uk
hans@mail.mpim-bonn.mpg.de
mitchell@radonc.unc.edu
jzabek@us.oracle.com
rsnyder@eos.hitc.com
obert_bridgham@b-e-s-t.com
jonb@visi.com
vogelke@c17.wpafb.af.mil
 
 for their suggestions and their time!
 
 
 --Bobby



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:12:02 CDT