[Techtalk] Security question

[mmp_fox at bellsouth.net]

Any products compiled libwrap can be used directly.  Other services must be used "through" things like the wrappers or xinetd (which have the wrapper built into them).

To see if a binary has libwrap.so in it directly:
ldd binaryFileName | grep libwrap. 

If nothing comes back, it doesn't have libwrap.

- Barbara Fox

> Hi, 
> 
> The files you referenced are, as far I can recall, part of the tcp 
> wrapperd (tcpd) package 
> by Wietse Venema. Only programs that are written with tcpwrappers 
> (link the library?) or 
> run through tcpd ( in [x]inetd ) will be affected by them. 
> 
> I think ssh (openssh) does use wrappers, but you'd have to check your 
> ftpd to see if 
> it does or if you are wrapping it in inetd. 
> 
> Hope that helps, 
> adric 
> 
> On Mar 12, 2008, at 10:56 PM, mgmonza at faeroes.freeshell.org wrote: 
> 
> > If I have hosts.deny set to all.paranoid and hosts.allow set like 
> > this: 
> > 
> > ALL: myid at myother.place.org 
> > All: 321.12.123.333 
> > 
> > (fake IP address there) 
> > 
> > can attacks from outside get in to use ftp, ssh etc? I thought not, 
> > but 
> > Firestarter's kinda scaring me with what's coming in. 
> > 
> > Thanks for the help. 
> > 
> > Kathy 
> > 
> > _______________________________________________ 
> > Techtalk mailing list 
> > Techtalk at linuxchix.org 
> > http://mailman.linuxchix.org/mailman/listinfo/techtalk 
> 
> Adric Net 
> adric at adric.net 
> 
> 
> 
> _______________________________________________ 
> Techtalk mailing list 
> Techtalk at linuxchix.org 
> http://mailman.linuxchix.org/mailman/listinfo/techtalk