Re: /etc/inetd.conf entry to block telnet with tcp wrappers

From: Raju G V (SSE-ISL-ITPL) (rajugv@VYSBANK.COM)
Date: Fri Aug 29 2003 - 11:37:59 EDT


it is working fine now.

i have given the entries as telnetd and ftpd in hosts.deny.
and i have given class c address for denying a particular domain.

no hosts.allow is existing.

thanks and regards
- g v raju

-----Original Message-----
From: Adam Hanel [mailto:hanela@BILLINGS.K12.MT.US]
Sent: 29/Aug/2003 7:37 PM
To: aix-l@Princeton.EDU
Subject: Re: /etc/inetd.conf entry to block telnet with tcp wrappers

Here's how I have mine setup.

/etc/hosts.deny
ftpd:ALL:
telnetd:ALL:
ALL:ALL:

then in /etc/hosts.allow I have individually listed the IP's that can
connect. Or their whole class c.

telnetd:10.10.1.
telnetd:10.1.1.65

Are you trying to JUST Deny specific hosts and allow the rest?
Or do you want to deny all hosts, and allow certain ones to get through?

-Adam

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Raju G V (SSE-ISL-ITPL)
Sent: Friday, August 29, 2003 5:56 AM
To: aix-l@Princeton.EDU
Subject: Re: /etc/inetd.conf entry to block telnet with tcp wrappers

hosts.allow contains nothing.

thanks
g v raju

-----Original Message-----
From: Adam Hanel [mailto:hanela@BILLINGS.K12.MT.US]
Sent: 28/Aug/2003 11:12 PM
To: aix-l@Princeton.EDU
Subject: Re: /etc/inetd.conf entry to block telnet with tcp wrappers

Do you have anything in your hosts.allow file?

-Adam

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Raju G V (SSE-ISL-ITPL)
Sent: Thursday, August 28, 2003 6:19 AM
To: aix-l@Princeton.EDU
Subject: /etc/inetd.conf entry to block telnet with tcp wrappers

Hail All,

I have installed tcp wrappers in AIX 4.3 (P270) machine.
And configured the /etc/inetd.conf as to block telnet and ftp daemons
and added entries in /etc/hosts.deny as follows:

But, the system is blocking these for all the machines which try to
connect
this machine.
Please provide solution.

/etc/inetd.conf entry:
------------------------
telnet stream tcp6 nowait root /usr/sbin/tcpd -l -d telnetd
ftp stream tcp6 nowait root /usr/sbin/tcpd -l -d ftpd

/etc/hosts.deny entry:
----------------------

in.telnetd: <other machine ip address>
in.ftpd: <other machine ip address>

thanks and regards
g v raju
system administrator
ing vysya bank
india





This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:10 EDT