Results 1 to 5 of 5

Thread: tcpwrappers

  1. #1
    Junior Member
    Join Date
    Sep 2003
    Posts
    28

    tcpwrappers

    Hi im using xinetd to host my services, and i was wondering are hosts.allow hosts.deny files only used by inetd ?, i know that xinetd has it's own built in tcpwrappers using syntax like only_from = 0.0.0.0 and no_access = 0.0.0.0 , i was just wondering if i would still have to implament this into hosts.allow and hosts.deny
    [glowpurple]www.openbsd.org - Unix for the practical paranoid[/glowpurple]

  2. #2
    Jaded Network Admin nebulus200's Avatar
    Join Date
    Jun 2002
    Posts
    1,356
    Typically only services in inetd services are wrapped (and you usually have to configure inetd to wrap those services); however, you can often times compile in the ability to use tcpwrappers in other packages (for example openssh). You will have to check the documentation of whatever service you are trying to run and whether or not tcpwrappers are a configuration issue.

    You may be interested in Psionic's PortSentry. This may help.

    If you are running linux, you may be better off running iptables.

    /nebulus
    There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.

    (Merovingian - Matrix Reloaded)

  3. #3
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    You may be interested in Psionic's PortSentry. This may help.
    FYI- PortSentry is now owned by Cisco and I don't believe they offer it for download.
    http://www.psionic.com/

    You can still get it if you know where to look....

    search google for "index portsentry"

    http://www.google.com/search?sourcei...dex+portsentry

  4. #4
    Jaded Network Admin nebulus200's Avatar
    Join Date
    Jun 2002
    Posts
    1,356
    Originally posted here by phishphreek80


    FYI- PortSentry is now owned by Cisco and I don't believe they offer it for download.

    You can still get it if you know where to look....

    search google for "index portsentry"

    http://www.google.com/search?sourcei...dex+portsentry

    **sniff** Another good free product bites the dust...

    *sigh*

    Thanks for the update.

    /nebulus
    There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.

    (Merovingian - Matrix Reloaded)

  5. #5
    Junior Member
    Join Date
    Sep 2003
    Posts
    28
    Thanks for info guy's seems their's no need for hosts.allow and hosts.deny with xinetd as it has wrappers built in
    [glowpurple]www.openbsd.org - Unix for the practical paranoid[/glowpurple]

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •