Subject: Re: [netatalk-admins] tcpwrapper
From: Oliver Wrede (owrede@ds.fh-koeln.de)
Date: Thu Mar 12 1998 - 11:34:14 EST
At 08:30 12.03.98 -0500, Wes Brown wrote:
>Something that I have been wondering, but have not taken the time to read
>the source to find out is what is the prefix for the /etc/hosts.deny
>/etc/hosts.allow file that can wrap out just netatalk?
>
>I would guess it is one of the following:
>netatalk:ALL
>atalkd:ALL
>afpd:ALL
The last one ist it! You got to put the actual program name there.
>Does it only work for AppleShareIP?
Because you control a _TCP_wrapper with hosts.deny/hosts.allow, you
will notice, that it wraps the TCP services. The original AppleTalk
istself is running on top of DDP (instead of TCP), so it won't be
affected. You can verify that in /etc/services
But Internet-Routers usually do not route DDP, so you'll be stick
to your subnet anyway!
Oliver
. causa formalis . . . Bruesseler Platz 15 . . owrede@causa-formalis.de .
. informationsdesign . 50674 Koeln, Germany .
<http://www.causa-formalis.de/>www.causa-formalis.de . .
. . . . . . . . . . . . tel +49 221 9522 600 . fax: 605 . . . . . . . . .
This archive was generated by hypermail 2b28 : Sat Dec 18 1999 - 16:31:32 EST