topic Re: TCPwrappers in Operating System - HP-UX

TCPwrappers

Betty Fessler — Fri, 14 Apr 2006 13:56:45 GMT

Is tcpwrappers part of SSH or Bastille for an HP-UX11.23 system? Do you need to be running the ssh daemon for it to work. I found tcpwrappers available for an 11.11 system but not for 11.23. Can tcpwrappers work on 11.11 independantly of having ssh or other software products installed. It says its a web upgrade

Re: TCPwrappers

Joel Girot — Sat, 15 Apr 2006 03:57:16 GMT

Hi Betty

take a look at next link :
http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/tcp_wrappers-7.6/

The TCP Daemon (/usr/lbin/tcpd) is the TCP Wrappers daemon. if tcpd is on the system that indicate that TCP Wrappers are installed.

Hope it helps,
Joel

Re: TCPwrappers

RAC_1 — Sat, 15 Apr 2006 04:54:51 GMT

HP's ssh comes with tcp built in. so if you installhp ssh, no need to install tcp wrappers seperately.

Re: TCPwrappers

Juan M Leon — Sun, 16 Apr 2006 00:42:01 GMT

tcp wrappers is not a part of ssh. But you can install tcpwrappers from http://h20293.www2.hp.com/ just remenber that you will have to edit the host.allow file to allow ssh, tlenet and ftp to the server.
good luck

Re: TCPwrappers

Sยภเl Kย๓คг — Sun, 16 Apr 2006 05:43:26 GMT

Hi,

SSH for HP UNIX has inbulit TCPwrappers , You just need to configure it.

see the bellow given link to configure TCPwrappers with SSH. http://www.ssh.com/support/documentation/online/ssh/adminguide/32/Configuring_SSH_Secure_Shell_for_TCP_Wrappers_Support.html

Regards,
Sunil

Re: TCPwrappers

Senthil Prabu.S_1 — Mon, 17 Apr 2006 01:32:11 GMT

Hi,
TCP wrapper doesn't comes with any version of HP-UX OSes, I guess. It has no role to play with ssh.

Basically, it is used to secure all the network services on the Os, like ftp, ssh etc. So, it is used to wrap the services with tcpd, so that the datas are encrpted.

And,What Are TCP Wrappers?

Daemons that are called from inetd that use tcp connections generally provide very little connection logging and tend to run promiscuously. Because we don't want our machine to be accessible to anyone with a computer and a network connection, we need a way to restrict access to services.

TCP wrappers allow you to define access privileges as broadly or as narrowly as you like while logging all connections

you should know more, before using them.
Plz refer following link to know more,

http://www.wright.edu/cats/catsweb/ns/osxs_sec/tcpw_install.html

HTH,
Prabu.S

Re: TCPwrappers

Robert Fritz — Mon, 17 Apr 2006 11:40:29 GMT

If you're trying to log or selectively block you traffic, you may also want to consider IPFilter. That does come with 11.23 and up, and can be easily configured using Bastille.

It should perform better than tcpwrappers, since its a kernel module, and also can perform logging, and fairly sophisticated blocking criteria.

If you want to perform arbitrary functions on connection, you may have to use tcpwrappers, but for most folks, I suspect IPFilter will do the job better.

For more info on IPFitler:
http://docs.hp.com/en/B9901-90021/index.html

Re: TCPwrappers

Betty Fessler — Mon, 17 Apr 2006 12:32:59 GMT

Thanks everyone, I received all I need and more, some great links. Thanks again.