tcp_wrappers

tcp_wrappers merupakan salah satu aplikasi firewall
Untuk konfigurasinya ada file /etc/hosts.allow dan /etc/hosts.deny

Contoh penggunaannya

file /etc/hosts.allow

#
# hosts.allow This file contains access rules which are used to
# allow or deny connections to network services that
# either use the tcp_wrappers library or that have been
# started through a tcp_wrappers-enabled xinetd.
#
# See 'man 5 hosts_options' and 'man 5 hosts_access'
# for information on rule syntax.
# See 'man tcpd' for information on tcp_wrappers
#
vstfpd : 192.168.100.* EXCEPT 192.168.100.254

konfigurasi diatas artinya kurang lebih adalah semua ip 192.168.100.1-253 dijinkan untuk mengakses service ftp kecuali 192.168.100.254

file /etc/hosts.deny

#
# hosts.deny This file contains access rules which are used to
# deny connections to network services that either use
# the tcp_wrappers library or that have been
# started through a tcp_wrappers-enabled xinetd.
#
# The rules in this file can also be set up in
# /etc/hosts.allow with a 'deny' option instead.
#
# See 'man 5 hosts_options' and 'man 5 hosts_access'
# for information on rule syntax.
# See 'man tcpd' for information on tcp_wrappers
#
#
# The portmap line is redundant, but it is left to remind you that
# the new secure portmap uses hosts.deny and hosts.allow. In particular
# you should know that NFS uses portmap!
#
sshd : 192.168.100.75

kalau ini ip 192.168.100.75 tidak diijinkan untuk mengakses remote akses menggunakan ssh.

Sekian tutorial singkat ini ^_^
Tetap masih newbie..mohon pencerahaannya dari yang lebih tau ^_^

Leave a comment