TCP wrappers
My company ran cybercop on one of my servers and it came out with a TCP Wrappers Check with comments of why TCP wrapper installed ports 21 and 23 are vulnerable - how can I fix it? Thanks for your time and help.
Mari-Es

    Requires Free Membership to View

    By submitting your registration information to SearchNetworking.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchNetworking.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.


Due to the nature of both Telnet & FTP services, they are sometimes hard to remove or shutdown on the system. TCP wrapper programs are used to control the access to these services by limiting access by Hosts and IP addresses. It works as an IP packet filtering facility and provides more specific control over Network services. It also makes use of the standard syslog facility to track local network use. TCP wrappers provide an Access control mechanism by using two files host.deny and host.allow which you install in /etc. You can download a precompiled copy of tcp_wrappers from ftp://ftp.uwsg.indiana.edu/pub/security/wrapbin.

If you are not familiar with the installation, the instructions are available in text format with examples on how to configure host.deny and host.allow files.

Hope this helps. Please write back if you need any more information.

This was first published in September 2002