[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]

[linux-users:87032] hosts.allow


okaです、お世話になります。
turbolinux w6.0を使っています。(イントール済みのものをそのま
ま)
hosts.allowのエラーについて教えてください。

一、
hosts.deny

ALL: ALL

hosts.allow

ALL : 192.168.0.0/255.255.255.0 127.0.0.

/usr/sbin/tcpdchk -v
結果
warning : /etc/inetd.conf,line82:clock: not found: no such file or directory
using network configuration file : /etc/inetd.conf

>>>rule /etc/hosts.allow line 9:
deamon : all
clients : 192.168.0.0/255.255.255.0 127.0.0.1
warning : /etc/hosts.allow line 9:cannot verify hostname:gethostbyname
            (localhost.localdomain)failed
access : granted

>>>rule /etc/hosts.deny line 8:
deamon : all
clients : all
access : denied

/usr/sbin/tcpdmatch all 192.168.0.4
結果
warning : /etc/inetd.conf,line82:clock: not found: no such file or directory
clients : address 192.168.0.4
server : process all
matchd : /etc/hosts.allow line 9:
access : granted

警告の原因はなんでしょうか
hostnameが確認できないとは、どういう意味でしょうか。
clock のエラーが出ています。
clock のfile というのがあるんでしょうか。

二、
「特に理由がない限りinetdは走らせるべきでなく、代わりにtcpserverを
使うべきである。」とsecurity for linux にあるのですが、turbolinux
 
w6.0用というのがあるのでしょううか。
RPMを入手できるところを教えて頂けないでしょうか。

三、
inetd.conf です。
swat  以外はそのままです。
#
# inetd.conf This file describes the services that will be available
#  through the INETD TCP/IP super server.  To re-configure
#  the running INETD process, edit this file, then send the
#  INETD process a SIGHUP signal.
#
# Version: @(#)/etc/inetd.conf 3.10 05/27/93
#
# Authors: Original taken from BSD UNIX 4.3/TAHOE.
#  Fred N. van Kempen, <waltje _at_ uwalt.nl.mugnet.org>
#
# Modified for Debian Linux by Ian A. Murdock <imurdock _at_ shell.portal.com>
#
# Modified for RHS Linux by Marc Ewing <marc _at_ redhat.com>
# Modified for TurboLinux/TurboLinux Server by Scott Stone
#                                           <sstone _at_ turbolinux.com>
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
# Echo, discard, daytime, and chargen are used primarily for testing.
#
# To re-read this file after changes, just do a 'killall -HUP inetd'
#
echo stream tcp nowait root internal
echo dgram udp wait root internal
discard stream tcp nowait root internal
discard dgram udp wait root internal
daytime stream tcp nowait root internal
daytime dgram udp wait root internal
chargen stream tcp nowait root internal
chargen dgram udp wait root internal
#
# These are standard services.
#
#ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -l -a
#telnet stream  tcp  nowait  root    /usr/sbin/tcpd in.telnetd -h
#gopher stream  tcp  nowait  root    /usr/sbin/tcpd gn

# do not uncomment smtp unless you *really* know what you are doing.
# smtp is handled by the sendmail daemon now, not smtpd.  It does NOT
# run from here, it is started at boot time from /etc/rc.d/rc#.d.
#smtp stream  tcp  nowait  root    /usr/bin/smtpd smtpd
#nntp stream tcp nowait root /usr/sbin/tcpd in.nntpd
#
# Shell, login, exec and talk are BSD protocols.
#
#shell stream tcp nowait root /usr/sbin/tcpd in.rshd
#login stream tcp nowait root /usr/sbin/tcpd in.rlogind
#exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
#talk dgram udp wait root /usr/sbin/tcpd in.talkd
#ntalk dgram udp wait root /usr/sbin/tcpd in.ntalkd
#dtalk stream tcp wait nobody /usr/sbin/tcpd in.dtalkd
#
# Pop and imap mail services et al
#
#pop-2   stream  tcp     nowait  root    /usr/sbin/tcpd ipop2d
#pop-3   stream  tcp     nowait  root    /usr/sbin/tcpd ipop3d
#imap    stream  tcp     nowait  root    /usr/sbin/tcpd imapd
#
# The Internet UUCP service.
#
#uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting.  Most sites
# run this only on machines acting as "boot servers." Do not uncomment
# this unless you *need* it.
#
#tftp dgram udp wait root /usr/sbin/tcpd in.tftpd
#bootps dgram udp wait root /usr/sbin/tcpd bootpd
#
# Finger, systat and netstat give out user information which may be
# valuable to potential "system crackers."  Many sites choose to disable
# some or all of these services to improve security.
#
# cfinger is for GNU finger, which is currently not in use in RHS Linux
#
#finger stream tcp nowait root /usr/sbin/tcpd in.fingerd
#cfinger stream tcp nowait root /usr/sbin/tcpd in.cfingerd
#systat stream tcp nowait guest /usr/sbin/tcpd /bin/ps -auwwx
#netstat stream tcp nowait guest /usr/sbin/tcpd /bin/netstat -f inet
#
# Time service is used for clock syncronization.
#
#time stream tcp nowait nobody /usr/sbin/tcpd in.timed
#time dgram udp wait nobody /usr/sbin/tcpd in.timed
#
# Authentication
#
#auth   stream  tcp     nowait    nobody    /usr/sbin/in.identd
in.identd -l -e -o
#
# End of inetd.conf

swat      stream  tcp     nowait.400      root /usr/sbin/swat swat

この情報があなたの探していたものかどうか選択してください。
yes/まさにこれだ!   no/違うなぁ   part/一部見つかった   try/これで試してみる

あなたが探していた情報はどのようなことか、ご自由に記入下さい。特に「まさにこれだ!」と言う場合は記入をお願いします。
例:「複数のマシンからCATV経由でipmasqueradeを利用してWebを参照したい場合の設定について」
Follow-Ups: