NetNews Usenet Archive 1992 #16/NN_1992_16.iso/spool/comp/sys/next/sysadmin/4424

Text File | 1992-07-28 | 1.6 KB | 40 lines

Newsgroups: comp.sys.next.sysadmin
Path: sparky!uunet!caen!sdd.hp.com!ux1.cso.uiuc.edu!jeffo
From: [e-mail] (J.B. Nicholson-Owens)
Subject: Anyone installed tcpd?
Message-ID: <[e-mail]>
Summary: I can't get the 'try' program to return 'access denied' for a bogus host
Keywords: tcpd install help
Reply-To: [e-mail]
Organization: University of Illinois at Urbana
Date: Wed, 29 Jul 1992 00:35:08 GMT
Lines: 27

I've got a problem with the tcp_wrappers from cert (also known as
tcpd).  It supposedly monitors all activity over the specified daemons
and logs it or disallows access if the host cannot be looked up.

My problem is that when I make the program with all the options
(except SYSTYPE and AUX_OBJ) in the Makefile, the executables are
created without warning or error but after installation and reboot
they do not work.  The try program always returns 'access granted'
even if I know I'm giving it a non-existant host and it confirms it by
not finding the host's IP address:

# try telnetd bogushost
warning: host unknown: bogushost
daemon telnetd: host name bogushost (address ?.?.?.?): access granted

# try /usr/etc/telnetd bogushost
warning: host unknown: bogushost
daemon /usr/etc/telnetd: host name bogushost (address ?.?.?.?): access granted

(If it cannot find the host [as shown by the warning given and the
question marks for IP address], and I compiled it with -DPARANOID, why
is it allowing access to the named daemon?)

Any help would be appreciated on this.  Thank you.
--
-- Jeff ([e-mail])
-- No NeXTmail please