Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 27 Jun 1998 15:28:27 -0400 (EDT)
From:      Steve Hovey <shovey@buffnet.net>
To:        ben@rosengart.com
Cc:        isp@FreeBSD.ORG
Subject:   Re: configuring tcp_wrapper
Message-ID:  <Pine.BSI.3.95.980627152717.9456B-100000@buffnet11.buffnet.net>
In-Reply-To: <Pine.GSO.3.96.980627151738.23169A-100000@echonyc.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 27 Jun 1998, Snob Art Genre wrote:

> I'm trying to configure tcp_wrapper to allow ftp access from the local
> network but nowhere else.  I've read the hosts_access(5) man page, and
> written configuration files, but I'm not having any luck.
> 
> Here's my ftpd line in inetd.conf:
> 
> ftp stream tcp nowait root /usr/local/libexec/tcpd ftpd -l

You ftpd deamon must be in the path you set for tcpd for the real programs

> 
> My hosts.allow is empty, and my hosts.deny reads as follows:
> 
> #disallow ftp access
> ftpd: ALL EXCEPT 10.0.0.0/255.0.0.0
> 

You need to set host.deny to ALL
then host.allow to 10.0.0.0/255.0.0.0

which ends up being deny all, but allow 10.0.0.0 etc connects.


> Yet I find that I can connect via ftp from a shell account at my ISP
> just as well as from the local network.
> 
> I would greatly appreciate it if someone could tell me what I am doing
> wrong.
> 
> 
>  Ben
> 
> "You have your mind on computers, it seems." 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

------------------------------------------------------------------
Steve Hovey
Chief Network Administrator
BuffNET		More Than Just a Connection!
------------------------------------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.980627152717.9456B-100000>