Dear friends,
Before we get the computer to set up our own firewall, I want to install
tcp_wrapper on our workstaions first to have some protection. I got the
ready-to-use package called YASSP for our SUNs, but I could not find a
similar package for SGI. I installed the pre-compiled tcp_wrapper from SGI's
freeware website, but looks like it needs more configuration. So I followed
the readme file. Here is what I did:
1. I installed tcp_wrapper 7.6 from SGI's website, and the resulted files
are in /usr/freeware/bin
2. I then copied the program tcpd from /usr/freeware/bin to /usr/etc
directory, and edited the /etc/inetd.conf file, replacing lines such as
telnet stream tcp nowait nobody /usr/etc/telnetd telnetd
to
telnet steam tcp nowait nobody /usr/etc/tcpd telnetd
3. I made hosts.allow and hosts.deny files in /etc. Those file format should
be right since I just copied from my SUN, on which the tcp_wrappers works
fine.
4. Rebooted the computer.
But I could not telnet to the SGI from the host that I allow to access that
SGI. The client computer can connect to the comoputer, but the login prompt
never appears and then the connection is closed. Looking at both the README
and Makefile, I noticed that the REAL_DEMON_DIR has to be set. The README
tells me to make a directory called REAL_DEMON_DIR, but it does not seem to
work, and I could not figure out a way to set up this REAL_DEMON_DIR
correctly.
Would anyone who has done the tcp_wrapper before on SGI tell me what step I
did wrong/missing? I searched the email achive, but could not find any info
on it. Any suggestions will be greatly appreciated.
Regards
Wei Li
Received on Fri Nov 09 2001 - 09:50:36 MST