Softpanorama (slightly skeptical) Open Source Software Educational Society

May the source be with you, but remember the KISS principle ;-) Softpanorama Search

tcpdmatch

The tcpdmatch utility enables you to test specific examples against your configuration files. Again, tcpdmatch enables you to test against a hosts.allow file in your current directory by specifying the -d option. It also recognizes the -i/path/to/inetd.conf if tcpdmatch has trouble finding it.

tcpdmatch [-d] [-i inet_conf] daemon[@server] [user@client]

The program examines the tcpd access control tables (default /etc/inet/hosts.allow and /etc/inet/hosts.deny) and prints its conclusion. For maximum accuracy, it extracts additional information from your inetd network configuration file.

When tcpdmatch finds a match in the access control tables, it identifies the matched rule. In addition, it displays the optional shell commands or options in a pretty-printed format. This makes it easier for you to spot any discrepancies between what you want and what the program understands.

daemon[@server]

A daemon process name. Typically, the last component of a daemon executable pathname.

The optionally specified server may be a host name or network address, or one of the unknown or paranoid wildcard patterns. The default server name is `unknown'.

[user@]client

A host name or network address, or one of the unknown or paranoid wildcard patterns.

The optionally specified user is a client user identifier, typically, a login name or a numeric userid. The default user name is unknown.

When a client address is specified, tcpdmatch predicts what tcpd would do when client name lookup fails.

Options

-d

Examine hosts.allow and hosts.deny files in the current directory instead of the default ones.

-i inet_conf

Specify this option when tcpdmatch is unable to find your inetd network configuration file, or when you suspect that the program uses the wrong one.

References

Author

Examples

The same request, pretending that hostname lookup failed:

tcpdmatch in.telnetd 127.0.0.1

To predict what tcpd would do when the client name does not match the client address:

tcpdmatch in.telnetd paranoid

Old News ;-)

Recommended Links

tcpdmatch command availability

tcpdmatch(1Mtcp)

 Authen-Tcpdmatch - search.cpan.orgAuthen::Tcpdmatch, Perl extension for parsing hosts.allow and hosts.deny.