(no subject)
Michael D. Mauney (Michael.D.Mauney.1@gsfc.nasa.gov)
Fri, 11 Apr 1997 10:44:33 -0400
>Date: Fri, 11 Apr 1997 10:43:33 -0400
>From: "Michael D. Mauney Bldg 12 Rm E32 x 6824"
><mmauney@reliant.gsfc.nasa.gov>
>To: Michael.D.Mauney@gsfc.nasa.gov
>X-Sun-Charset: US-ASCII
>
>Dear Managers,
>
>First I would like to thank all the respondent for my first
>tcp_wrappers_7.5 install posting, after following your suggestion and
>other teak the install went fine. But now I need help with the hosts.deny
>file. I would like to denie access to certain hosts and have email send to
>me when they make an attempt to login. These are the steps that I took to
>setup the hosts.deny file.
>
>1. I put the copy tcpd,safe_finger and tcpdchk to /usr/sbin/
>
>2. I modify /etc/inetd.conf
>
>Before:
>ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd
>telnet stream tcp nowait root /usr/sbin/in.telnet in.telnetd
>
>After:
>ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd
>telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
>
>3. I killed the inetd process
>#kill -HUP ###
>
>4. I created the /etc/hosts.deny file.
>in.telnetd : spock.gsfc.nasa.gov :(/usr/sbin/safe_finger -l @%h | \
>/usr/bin/mail -s %d-%h Michael.D.Mauney.1@gsfc.nasa.gov) &
>
>5. I tryed to log in from spock.gsfc.nasa.gov
> Note: These are not the node name.
>
>6. Because the kirk node hosts.deny file allowed me to login from spock I
>ran the tcpdchk command and got the following results.
>
>#/usr/sbin/tcpdchk -v
>Using network configuration file: /etc/inet/inetd.conf
>>>> Rule /etc/hosts.deny line 1:
>daemons: in.telnetd
>clients: spock.gsfc.nasa.gov
>error: /etc/hosts.deny, line 1: bad option name: "(/usr/sbin/safe_finger"
>access: denied
>
>Would someone please inform me on what I'm doing wrong or how to setup
>tcp_wrappers_7.5 hosts.deny for solaris 2.5
>
>Thanks
>