Re: [ILUG-BOM] tcpd thread

Sometime Today, Devdas Bhagat assembled some asciibets to say:

...

                          what about tcpd + xinetd?

xinetd has its own syntax like tcp wrappers, but it does not use libwrap.

Actually, you can compile xinetd with libwrap, and on redhat systems, it is by default. Xinetd also allows you to call tcpd with a program name.

Essentially, any server which is not called from tcpd will not be protectable. Hence, anything that runs standalone and forks children to handle requests (sendmail/apache, etc) cannot be protected by tcp

sendmail can be compiled with libwrap, ssh too. On RH7.1, sendmail is compiled with libwrap.

Many other daemons are also compiled with libwrap.

Philip