This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| сервис_tcpwrap [2012/06/14 13:26] val создано | сервис_tcpwrap [2025/10/25 09:48] (current) val [Проверка поддержки программой библиотеки libwrap] | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Сервис Tcpwrap ====== | ====== Сервис Tcpwrap ====== | ||
| - | [[http://ubuntu-tutorials.com/2007/09/02/network-security-with-tcpwrappers-hostsallow-and-hostsdeny/]] | + | ===== Проверка поддержки программой библиотеки libwrap ===== | 
| + | |||
| + | !!! убрали в debian13 | ||
| <code> | <code> | ||
| - | gate# cat /etc/hosts.allow | + | debian12_ubuntu24# ldd /usr/sbin/sshd | grep wrap | 
| - | <code></code> | + | </code> | 
| - | ALL: 127.0. | + | |
| - | sshd: 192.168.5.10 | + | ===== Конфигурация в режиме "все запрещено, кроме" ===== | 
| + | |||
| + | * [[http://ubuntu-tutorials.com/2007/09/02/network-security-with-tcpwrappers-hostsallow-and-hostsdeny/|Network Security with tcpwrappers (hosts.allow and hosts.deny)]] | ||
| + | |||
| + | <code> | ||
| + | # cat /etc/hosts.allow | ||
| + | </code><code> | ||
| + | ALL: 127.0.0.0/8 | ||
| + | # sshd: 192.168.X.10 | ||
| + | # sshd: 192.168.X.0/24 192.168.100+X.0/24 | ||
| + | </code><code> | ||
| + | # cat /etc/hosts.deny | ||
| + | </code><code> | ||
| + | sshd:ALL | ||
| + | </code><code> | ||
| + | # tail -f /var/log/auth.log | ||
| + | </code> | ||
| + | ===== Конфигурация в режиме "все разрешено, кроме" ===== | ||
| + | <code> | ||
| + | # :> /etc/hosts.allow | ||
| + | </code><code> | ||
| + | # cat /etc/hosts.deny | ||
| </code><code> | </code><code> | ||
| - | gate# cat /etc/hosts.deny | + | ALL: 172.16.1.249 | 
| - | <code></code> | + | |
| - | ALL:ALL | + | |
| </code> | </code> | ||