tcp_wrappers issue.

[Gino Castoldi_2]

Hi,

HP-UX 11.0 Tcp_Wrappers 7.6

I installed tcp_wrappers on a
HP-UX 11.0 server.

I created /etc/hosts.allow
which has this line only:
ALL: ALL: ALLOW

I can telnet as before but it will not allow telnet to the localhost now, it fails.
It says that it connects but, I don't get the login prompt.

telnet example:
root# telnet 0
or
root# telnet 127.0.0.1

Note: I did not create a
/etc/hosts.deny file.

/etc/inetd.conf entry:

telnet stream tcp nowait root /usr/local/bin/tcpd telnetd -b /etc/issue

Why is this happening?
Should Tcp_Wrappers disallow
this?

10 points to good answer.
Thank you Gino.

[Jerome Baron · Accepted solution]

Hi Gino,

Have you some message in syslog file ? You can use inetd -l to log all access in syslog.

Regards,
Jerome

[Gino Castoldi_2]

Hi,

Here is the output in the /var/adm/syslog/syslog.log
file when I attempt to telnet
to the localhost.

Nov 7 10:46:24 bosov2 inetd[18235]: telnet/tcp: Connection from localhost (127.0.0.1) at Thu Nov 7 10:46:24 2002
Nov 7 10:46:33 bosov2 inetd[18241]: telnet/tcp: Connection from localhost (127.0.0.1) at Thu Nov 7 10:46:33 2002

10 points to any good answer.
Thank you Gino.

[Gino Castoldi_2]

Hi,

Here is the output when it tries to connect.

root# telnet 0
Trying...
Connected to 0.
Escape character is '^]'.
Local flow control off
Connection closed by foreign host.


10 points to any good answer.
Thank you Gino.

[Jerome Baron]

Hi Gino,

Your problem can be caused by a problem with device file use by telnet.
Can you shoh output:
# ll /dev/telnetm
# ll /dev/pts/t*
# lsdev | grep tel
19 -1 telm strtelm
20 -1 tels strtels

The value shown by "lsdev" for "telm" would need to be equal to the minor
number of "/dev/telnetm"
- AND -
the value shown for "tels" would need to be equal to the major number of
the /dev/pty/t* device files.

Are you in this case ?

Regards,
Jerome

[Kellogg Unix Team]

Gino,

Just to troubleshoot, can you put the original line back in /etc/inetd.conf and try telnet to localhost ? I don't think tcp_wrappers modify any device files on the system.

Also, from the above line, it looks as if you have moved/copied telnetd in /usr/local/bin directory. Try the following line -

telnet stream tcp nowait root /usr/local/bin/tcpd /usr/lbin/telnetd -b /etc/issue

...Manjeet

[Christopher McCray_1]

Hello,

You must put in an ip address in your hosts.allow line:

ALL: xxx.xxx.xxx.xxx : banners /etc/issue

If you want to be able to telnet localhost, then one of your entries will be 127.0.0.1

Hope this helps

Chris

[Gino Castoldi_2]

Hi,

I checked the devices files for "telnet" and they are ok.

I checked the inetd.conf file for telnetd and I added in the full path -
(/usr/lbin/telnetd)(inetd -c)and that worked. I can now telnet to localhost (127.0.0.1).


Thank you again Gino.