Dotaz: portmap necte hosts.allow a hosts.deny

[A.Korec]

Dobry den,
Uz jsem zoufaly. Mam Debian Sarge, portmap 5.4, libwrap0 7.6. Nemuzu donutit pormap aby nejakym zpusobem respektoval to co je napsane v etc/hosts.allow a etc/hosts.deny.
hosts.allow mam prazdny a v hosts.deny mam:
portmap: ALL
ALL: ALL
Je to jenom na zkousku, protoze stejne je port 111 otevreny pro vsechny (testoval jsem nmap, telnet). V manualu portmapu je napsane, ze pouziva tcpwrapers (knihovnu libwrap0 ), tak proc to nefunguje?
Nemate s tim nekdo zkusenost?

Odpovědi

[A.Korec]

Sry, Titulek: ...nechce cist...

[Petr Šobáň]

V hosts.allow nech ho prázdný a v hosts.deny nech pouze ALL: ALL

Jinak jak to testuješ ?

Ještě já mám v tom souboru napsáno:

#
# hosts.deny	This file describes the names of the hosts which are
#		*not* allowed to use the local INET services, as decided
#		by the '/usr/sbin/tcpd' server.
#
# The portmap line is redundant, but it is left to remind you that
# the new secure portmap uses hosts.deny and hosts.allow.  In particular
# you should know that NFS uses portmap!

ALL: ALL

Takže mu to někdo přeložte já portmap nepoužívám a en neumím.

[A.Korec]

To jsem zkousel taky (jen ALL:ALL).
Napr. nmap mi klidne vypise i status a mountd

galaxy:/# nmap -sT -sV -v 10.10.2.95
Starting nmap 3.75 ( http://www.insecure.org/nmap/ ) at 2004-12-12 16:36 CET
Initiating Connect() Scan against 10.10.2.95 [1663 ports] at 16:36
Discovered open port 942/tcp on 10.10.2.95
Discovered open port 615/tcp on 10.10.2.95
Discovered open port 111/tcp on 10.10.2.95
The Connect() Scan took 0.17s to scan 1663 total ports.
Initiating service scan against 3 services on 10.10.2.95 at 16:36
The service scan took 10.00s to scan 3 services on 1 host.
Initiating RPCGrind Scan against 10.10.2.95 at 16:36
The RPCGrind Scan took 6.30s to scan 3 ports on 10.10.2.95.
Host 10.10.2.95 appears to be up ... good.
Interesting ports on 10.10.2.95:
(The 1660 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE VERSION
111/tcp open rpcbind 2 (rpc #100000)
615/tcp open status 1 (rpc #100024)
942/tcp open mountd 1-3 (rpc #100005)
Nmap run completed -- 1 IP address (1 host up) scanned in 16.716 seconds

nebo
telnet 10.10.2.95 111