I realized the original mail was a bit too detailed. A shorter version: I used to work in the past with tcp-wrapper including the "advanced" configuration of firing booby-traps, etc'. I'm really puzzled at my Debian 3 TCPD behaviour. It seems not to respond "correctly" to hosts.allow. The work is around setting pure-ftpd to go through the TCPD and do some "extra work" as it starts its session. Please see the previous mail for more elaborated details... .
Has anyone experienced problems with TCPD v7.6-ipv6.1-3 ? Thanks, B. ----- Original Message ----- From: "Boaz Rymland" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 15, 2003 8:57 PM Subject: TCP-Wrapper problem > Hi there, > > I'm having problem getting the tcpd work as I used to see it work. > > I have pure-ftpd which I want to control it's access to. in hosts.allow, > I enter > pure-ftpd-wrapper : ALL > just to check the situation (all allowed). > > Yet, the connection is always blocked by the hosts.deny directive: "ALL > : ALL" (single line which together with hosts.allow implement "deny all > except otherwise noted..."). > I get the error message via syslog acknoledging TCPD has denied the > service "pure-ftpd-wrapper" for 1.2.3.4 > Yes, inet.d ftp line calls tcpd with "pure-ftpd-wrapper" as the required > service. This name is appearing in all hosts.* files. > When I put ALL:ALL in hosts.allow - the connection is permitted. Its as > if tcpd somehow doesn't get the string "pure-ftpd-wrapper" right in it's > config files. > > I've tried changing the string to somthing shorter, and updating > inetd.conf, hosts.*, and the executable itself (both a symlink and a > simple cp), yet nothing seemed to work. Somehow, TCPD doesn't seem to > get the hosts.allow right. Well, or me :-) > > BTW, I've also tried tcpdchk and got in return: > tcpdchk: relocation error: tcpdchk: undefined symbol: skip_ipv6_addr > I then checked tcpd executable itself with ldd. all seems o.k. > > The system is Debian sid (updated). > > Any idea? > thanks, > Boaz R > > > > ================================================================= > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
