TCP wrappers and wildcards

[Randy Toni]

Hi all - this may be a bit off topic since I'm on Tru64 but hopefully someone can lend a hand.

I've been experimenting a bit with TCP Wrappers on a Tru64 Unix 4.0G box. I added the line randyt@mypc.mydomain to the hosts.deny file and then modified the inetd.conf to let the wrapper intercept telnet requests -- it does kick me out when I try to telnet in from my pc. So far so good.

But I'm not having any luck with adding an entry to deny my user account from any workstation. Should I be able to add a line to the hosts.deny file with a wildcard for the username? Something like randyt@*

I tried this but it seems to have no effect. I'm using the free TCP Wrappers 7.6. Any suggestions?

Thanks in advance
randy

[Christopher McCray_1]

Hello,

I am not sure you can do this. You can't use * in the hosts.allow / hosts.deny file.

If I want to add a range (like a network), I would do this:

ALL: 1.2.3. (to let this network range in)

So, perhaps maybe if you try:

randyt@.mydomain

Maybe this will work; your other alternative is to add everything.

Hope this helps

Chris

[Christopher McCray_1]

Hello again,

Here is this doc:

http://www.docs.hp.com/hpux/pdf/5969-4315.pdf

Chris

[Gerhard Roets]

Randy

try randy@*.*.*.*

Mayne the * can only replace one octet at a time.

Regards
Gerhard