Re: a quick question for set up tcp_wrapper in SGI

From: Tony Pemberton <pemberaj_at_pugh.bip.bham.ac.uk>
Date: Mon, 12 Nov 2001 14:05:52 +0000

On Thu, 8 Nov 2001, Wei Li x8-7532 wrote:

> Dear friends,
>
> Before we get the computer to set up our own firewall, I want to install
> tcp_wrapper on our workstaions first to have some protection. I got the
> ready-to-use package called YASSP for our SUNs, but I could not find a
> similar package for SGI. I installed the pre-compiled tcp_wrapper from SGI's
> freeware website, but looks like it needs more configuration. So I followed
> the readme file. Here is what I did:
>
> 1. I installed tcp_wrapper 7.6 from SGI's website, and the resulted files
> are in /usr/freeware/bin
> 2. I then copied the program tcpd from /usr/freeware/bin to /usr/etc
> directory, and edited the /etc/inetd.conf file, replacing lines such as
> telnet stream tcp nowait nobody /usr/etc/telnetd telnetd
> to
> telnet steam tcp nowait nobody /usr/etc/tcpd telnetd
> 3. I made hosts.allow and hosts.deny files in /etc. Those file format should
> be right since I just copied from my SUN, on which the tcp_wrappers works
> fine.
> 4. Rebooted the computer.
>
> But I could not telnet to the SGI from the host that I allow to access that
> SGI. The client computer can connect to the comoputer, but the login prompt
> never appears and then the connection is closed. Looking at both the README
> and Makefile, I noticed that the REAL_DEMON_DIR has to be set. The README
> tells me to make a directory called REAL_DEMON_DIR, but it does not seem to
> work, and I could not figure out a way to set up this REAL_DEMON_DIR
> correctly.
>
> Would anyone who has done the tcp_wrapper before on SGI tell me what step I
> did wrong/missing? I searched the email achive, but could not find any info
> on it. Any suggestions will be greatly appreciated.
>
> Regards
>
> Wei Li
>
>

Wei Li,

You need to create the directory /usr/etc/... - That is three dots
really. Place copies of all the normal deamons (usually from directory
above /usr/etc/) in /usr/etc/...


This I think is what is missing. That is if you downloaded the sgi
freeware version.

Tony Pemberton


*********************************************************************
Mr. A.J.Pemberton Tel: +121-414-3388
c/o Dept. Rheumatology, Fax: +121-414-6794
Medical School, E-mail: A.J.Pemberton_at_bham.ac.uk
The University of Birmingham,
Birmingham B15 2TT.
U.K.
*********************************************************************
Received on Mon Nov 12 2001 - 09:19:00 MST

This archive was generated by hypermail 2.4.0 : Sun Jun 04 2023 - 17:10:57 MST