Arch Linux

yassin

Member

From: Finland

Registered: 2008-02-11

Posts: 10

Website

TCP Wrappers not working

I want to block all traffic except those rules listed in /etc/hosts.allow.

And I don't want nfs clients from anywhere to connect to my server.

But for some reason both of my configuration files are totally ignored  by arch:

/etc/hosts.allow
/etc/hosts.deny

#
# /etc/hosts.allow
#
sshd: ALL
nfsd : 192.168.10.
portmap: ALL
mountd: ALL
httpd: ALL
mysqld: ALL : ALLOW
tor: ALL

# End of file

#
# /etc/hosts.deny
#

ALL: ALL: DENY

# End of file

Last edited by yassin (2008-04-10 20:43:45)

---

"The real danger is not that computers will begin to think like men, but that men will begin to think like computers."

— Sydney J. Harris

yassin

Member

From: Finland

Registered: 2008-02-11

Posts: 10

Website

Re: TCP Wrappers not working

#archlinux @ Freenode
*******************

[20:23] < yassin> http://bbs.archlinux.org/viewtopic.php?id=46907
[20:23] < yassin> any suggestions?
[20:26] < tomkx> yassin - yes. For those who can't/won't click your link, ask an intelligent question that
          summarises your problem as briefly as possible, but with enough detail to enable anyone who's
          interested to answer you without asking for more information
[20:26] < yassin> ok
[20:26] < yassin> my TCP wrappers isn't working, /ets/hosts.deny & /etc/hosts.allow are totally ignored
[20:29] < yassin> tomkx: well the problem is everyone can connect to every port
[20:29] < yassin> like as if TCP wrappers wouldn't be running
[20:30] < yassin> tomkx: for example I have in hosts.allow - nfsd : 192.168.10.
[20:31] < yassin> and in hosts.deny - ALL: ALL: DENY
[17:32] < yassin> tomkx: any ideas?
[17:35] < tomkx> yassin - I was expecting something like "but nfs clients from anywhere can connect to my
          server". In other words, you haven't actually described a specific problem yet (and that includes
          your forum post)
[17:36] < yassin> tomkx: good point there
[17:36] < yassin> well yes, that is pretty much the problem
[17:39] < yassin> tomkx: I updated the post now
[17:42] < yassin> tomkx: that's not really the problem if we are specific, since I've got the right
          configurations, the problem is they are being ignored by arch
[17:43] < yassin> tomkx: so I'd say my problem description was correct: "TCP Wrappers not working"

Last edited by yassin (2008-04-10 20:50:57)

---

"The real danger is not that computers will begin to think like men, but that men will begin to think like computers."

— Sydney J. Harris