[HPADM] [partial summary] tcp wrappers on hp-ux 11.0

From: Julius Szelagiewicz (julius_at_turtle.com)
Date: 01/29/05

  • Next message: Julius Szelagiewicz: "[HPADM] [SUMMARY] tcp wrappers on hp-ux 11.0" 
    Date: Sat, 29 Jan 2005 13:46:53 -0500 (EST)
To: hpux admin <hpux-admin@DutchWorks.nl>

    Dear Folks,
            the key was to run tcpdchk and see what it complained about. It
    choked on the fact that the address of the host I am trying to block
    didn't resolve. I added it to /etc/hosts, and updated the /etc/hosts.deny
    file to read:
    ALL: 206.126.46.115, openwifi.turtle.com

    Now telnet through tcpd works, but the host I want to block is still
    allowed to telnet in. where am I blundering? julius

    On Sat, 29 Jan 2005, Julius Szelagiewicz wrote:
    > I need to limit telnet access to an L2000 box running HP-UX 11.0.
    > I downloaded tcp wrappers verion 7.6 from the porting site (HP has them
    > only for HP-UX 11.i). I did follow the instructions (I think), but telnet
    > run by tcpd doesn't work at all. Here are the changes:
    >
    > inetd.conf new telent line is:
    > telnet stream tcp nowait root /usr/local/bin/tcpd telnetd
    >
    > /etc/hosts.allow has just one line:
    > ALL: ALL
    >
    > /etc/hosts.deny has just one line:
    > ALL: 206.126.46.115
    >
    > What am I doing wrong, is this a problem with tcpd? julius 

    --
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)
  • Next message: Julius Szelagiewicz: "[HPADM] [SUMMARY] tcp wrappers on hp-ux 11.0"

    Relevant Pages

    • [HPADM] [SUMMARY] tcp wrappers on hp-ux 11.0
      ... I changed the name of the host in question to ... On Sat, 29 Jan 2005, Julius Szelagiewicz wrote: ... > allowed to telnet in. ... >> What am I doing wrong, is this a problem with tcpd? ...
      (HP-UX-Admin)
    • Re: telnet on a specific ip address
      ... MG> Alan Clifford wrote: ... MG>> On Tue, 26 Jun 2007, Martin Gregorie wrote: ... I'd be using tcpd as: ... MG> connection and rejects the connection if the host name retrieved from the ...
      (uk.comp.os.linux)
    • Re: telnet on a specific ip address
      ... It looked to me as if tcpd does a reverse DNS lookup for the remote host that opened the connection and rejects the connection if the host name retrieved from the socket doesn't match that returned by DNS. ... if I read it right it should be safe to write the access rules using IP numbers or host names. ... martin@ | Martin Gregorie ...
      (uk.comp.os.linux)