Differences between revisions 3 and 4
⇤ ← Revision 3 as of 2006-11-23 11:16:37 →
Size: 2113
Editor: mohacsi
Comment:
← Revision 4 as of 2008-04-10 15:29:32 → ⇥
Size: 2115
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
[[TableOfContents]] <<TableOfContents>>
Line 47: Line 47:
You should use IPv6 as in defined in [http://tools.ietf.org/html/rfc2732 RFC 2732]. See some examples from {{{/etc/hosts.allow}}}: You should use IPv6 as in defined in [[http://tools.ietf.org/html/rfc2732|RFC 2732]]. See some examples from {{{/etc/hosts.allow}}}:

Contents

  1. Segítség! A TCPwapper szerint a 0.0.0.0 címről érkeznek a kérések. Mit tegyek?
  2. Help! Acoording the TCPwapper the incoming requests are coming from ip address 0.0.0.0. What shall I do?
  3. How can configure IPv6 address in tcpwrapper?

Segítség! A TCPwapper szerint a 0.0.0.0 címről érkeznek a kérések. Mit tegyek?

A probléma lényege, hogy a TCPwrapper helytelenül ismeri fel az IPv6-os socketet. Upgrade-elni kell a TCPwrappert IPv6-ot kezelő változatra. Elérhető a ftp://ftp.porcupine.org/pub/security/ címen.

Áthidaló megoldás: /etc/inetd.conf -ban az adott szolgáltatást IPv4/IPv6-osról változtassuk IPv4-esre. Egy (példa):

régi: 

  •  shell   stream  tcp6    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd
    vagy: 
     shell   stream  tcp46    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd

új: 

 shell   stream  tcp    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd

Hátulütője ennek a megoldásnak, hogy a szolgálatatás nem lesz elérhető IPv6-on.

Help! Acoording the TCPwapper the incoming requests are coming from ip address 0.0.0.0. What shall I do?

The origin of the problem is that your tcpwrapper is old and not recognising IPv6 addresses. You should upgrade your tcpwrapper to the latest version which handles IPv6 socket properly. Available at ftp://ftp.porcupine.org/pub/security/ .

As an interim solution you can modify your /etc/inetd.conf by disabling service to ipv4 only. Example old: 

  •  shell   stream  tcp6    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd
    or : 
     shell   stream  tcp46    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd

new : 

 shell   stream  tcp    nowait  root    /usr/local/sbin/tcpd /usr/sbin/rshd

Of course this should be an interim solution until you upgrade tcpwrapper since zou disabled ipv6 on this service this way.

How can configure IPv6 address in tcpwrapper?

You should use IPv6 as in defined in RFC 2732. See some examples from /etc/hosts.allow: 

# To use IPv6 addresses you must enclose them in []'s
ALL : [fe80::%fxp0]/10 : allow
ALL : [fe80::]/10 : deny
ALL : [2001:db8:2:1:2:3:4:3fe1] : deny
ALL : [2001:db8:2:1::]/64 : allow

Campus6: TCPwrapper (last edited 2008-04-10 15:29:32 by localhost)