Dear friends,
Thanks to the many email suggestions I received. My original question was that I installed tcp_wrapper 7.6 from freeware.sgi.com, but I could not make it work correctly. It turns out that somehow the syntax in the hosts.deny was not quite right. After fix it, it works fine. Just in case someone else needs it in the future, here is the procedure to install:
1. go to freeware.sgi.com and find tcp_wrapper, the current version is 7.6
2. click the install icon, and you will install a pre-complied, pre-configured tcp_wrapper program into the directory /usr/freeware/bin.
3. Copy tcpd program and other programs in this directory to /usr/etc. Since I turned off a lot of services in inetd.conf, including finger, tcpd is the only program I need.
4. in /usr/etc, jot a text file called issue, and this will the warning when one sees when he tried to log in into your system.
5. copy the original inetd.conf to say, inetd.conf.orig, and then edit inetd.conf, according to the readme file, then restart inetd.
6. jot hosts.allow and hosts.deny files based on the examples in read me. Some people pointed out that hosts.deny is really not needed, since one can put deny statement in the hosts.allow.
7. try to see if everything is fine.
One response indicated to use ssh instead of telnet, as telnet does not do password encryptation. I have to know how to get this done on the SGI. For SUNs, that is easy, as yassp installs everything for you.
Thanks again for all of your help.
Regards
Wei Li
Received on Mon Nov 12 2001 - 09:19:00 MST