Re: /etc/inetd.conf entry to block telnet with tcp wrappers

From: Ron Schwingel (rschwing@NDSLTD.COM)
Date: Tue Sep 02 2003 - 10:08:16 EDT


Is it possible to use the "hosts.deny' or "hosts.allow" files
to deny/allow port numbers (i.e. 1234:a.b.c.d), or does
another file do this?

Ron Schwingel
Technical Support

NDS Solutions
303.755.4411(phone)
303.755.4545(fax)
rschwing@ndsltd.com

 -----Original Message-----
From: Adam Hanel [mailto:hanela@BILLINGS.K12.MT.US]
Sent: Friday, August 29, 2003 8:28 AM
To: aix-l@Princeton.EDU
Subject: Re: /etc/inetd.conf entry to block telnet with tcp wrappers

Instead of using in.telnetd or in.ftpd try just
ftpd:a.b.c.d
telnetd:a.b.c.d

or try
ALL:a.b.c.d

Where a.b.c.d is the machines ip's.

Your hosts.allow should be ok empty.

-Adam

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Raju G V (SSE-ISL-ITPL)
Sent: Thursday, August 28, 2003 6:19 AM
To: aix-l@Princeton.EDU
Subject: /etc/inetd.conf entry to block telnet with tcp wrappers

Hail All,

I have installed tcp wrappers in AIX 4.3 (P270) machine.
And configured the /etc/inetd.conf as to block telnet and ftp daemons
and added entries in /etc/hosts.deny as follows:

But, the system is blocking these for all the machines which try to
connect
this machine.
Please provide solution.

/etc/inetd.conf entry:
------------------------
telnet stream tcp6 nowait root /usr/sbin/tcpd -l -d telnetd
ftp stream tcp6 nowait root /usr/sbin/tcpd -l -d ftpd

/etc/hosts.deny entry:
----------------------

in.telnetd: <other machine ip address>
in.ftpd: <other machine ip address>

thanks and regards
g v raju
system administrator
ing vysya bank
india



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:10 EDT