On Sat, Mar 15, 2003 at 10:41:08PM +0200, Boaz Rymland wrote:
> I realized the original mail was a bit too detailed.
>
> A shorter version:
> I used to work in the past with tcp-wrapper including the "advanced"
> configuration of firing booby-traps, etc'.
> I'm really puzzled at my Debian 3 TCPD behaviour. It seems not to respond
> "correctly" to hosts.allow.
> The work is around setting pure-ftpd to go through the TCPD and do some
> "extra work" as it starts its session. Please see the previous mail for more
> elaborated details... .
>
1. Maybe it should be pure-ftpd rather then pure-ftpd-wrapper in
hosts.allow? I believe it is worth testing.
2. In case no one here knows I would try [EMAIL PROTECTED]
> Has anyone experienced problems with TCPD v7.6-ipv6.1-3 ?
> Thanks,
> B.
>
> ----- Original Message -----
> From: "Boaz Rymland" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, March 15, 2003 8:57 PM
> Subject: TCP-Wrapper problem
>
>
> > Hi there,
> >
> > I'm having problem getting the tcpd work as I used to see it work.
> >
> > I have pure-ftpd which I want to control it's access to. in hosts.allow,
> > I enter
> > pure-ftpd-wrapper : ALL
> > just to check the situation (all allowed).
> >
> > Yet, the connection is always blocked by the hosts.deny directive: "ALL
> > : ALL" (single line which together with hosts.allow implement "deny all
> > except otherwise noted...").
> > I get the error message via syslog acknoledging TCPD has denied the
> > service "pure-ftpd-wrapper" for 1.2.3.4
> > Yes, inet.d ftp line calls tcpd with "pure-ftpd-wrapper" as the required
> > service. This name is appearing in all hosts.* files.
> > When I put ALL:ALL in hosts.allow - the connection is permitted. Its as
> > if tcpd somehow doesn't get the string "pure-ftpd-wrapper" right in it's
> > config files.
> >
> > I've tried changing the string to somthing shorter, and updating
> > inetd.conf, hosts.*, and the executable itself (both a symlink and a
> > simple cp), yet nothing seemed to work. Somehow, TCPD doesn't seem to
> > get the hosts.allow right. Well, or me :-)
> >
> > BTW, I've also tried tcpdchk and got in return:
> > tcpdchk: relocation error: tcpdchk: undefined symbol: skip_ipv6_addr
> > I then checked tcpd executable itself with ldd. all seems o.k.
> >
> > The system is Debian sid (updated).
> >
> > Any idea?
> > thanks,
> > Boaz R
> >
> >
> >
> > =================================================================
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
>
>
>
> =================================================================
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
--
Shaul Karl, [EMAIL PROTECTED] e t
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
