Search Text         
Search Tips?
Search By   And   Or   Boolean   Exact Match   TA #
Search In   Whole Doc   Keywords Sort By  
Product   Sub Product  

View Technical Articles (sorted by Product) New/Updated in the last:    7 days      14 days      30 days             
TA # Date Created Date Updated Resolved Issue?   Printer Friendly Version of This TA   Print Article
  E-mail This TA   E-mail Article
114081 05/25/2001 01:21 PM 04/08/2005 08:24 PM
Yes No
How can I restrict access to my Openserver 5 system over the network?
Keywords
hosts deny allow equiv hosts.deny hosts.allow hosts.equiv restrict network access tcp wrappers ipfilter netgroups nat address translation smtp port 25
Release
SCO OpenServer Enterprise System Release 5.0.5, 5.0.6
SCO OpenServer Host System Release 5.0.5, 5.0.6
SCO OpenServer Desktop System Release 5.0.5, 5.0.6

Problem
          I want to restrict network access to my server. This can be
          done through /etc/hosts.deny and /etc/hosts.allow on Unixware 7,
          but these files don't exist on Openserver.  The hosts.equiv man
          page says this file can be used for this purpose if NIS is
          configured with netgroups, but my system is not using NIS.


Solution
          Openserver does not have built-in support for /etc/hosts.deny and
          /etc/hosts.allow and the hosts.equiv file can only be used to
          deny access to other hosts if the system is running NIS and has
          netgroups defined.

          The hosts.deny and hosts.allow functionality is available through
          unsupported software called "TCP Wrappers", which allows you to
          control access to network services on your systems. For more
          information about TCP Wrappers,  you can access the SCO Secure
          Technologies Group web site at the following URL:

                http://www.sco.com/security

          This site also reports the latest security vulnerabilities and
          the fixes that are available for these.

          You can download TCP Wrappers for OpenServer at

                ftp://stage.sco.com/TLS/tls076a.tcp_wrappers.tar.Z
                ftp://stage.sco.com/TLS/tls076a.ltr

          This, and other various security tools and libraries can be
          downloaded on an unsupported basis from SCO's ftp site.


SEE ALSO:
         
Related Articles
•  Which drivers on OpenServer Release 5 support dynamic MAC addresses?
•  vwTerm flag does not make server ignore sockets on SCO.
•  UNIX files and sub-directories not displayed in file transfer
•  How do I access a local html file from my Netscape browser?
•  "Attempt to access invalid address" when trying to access the VisionTools share from NT4 with SP6 (Service Pack 6).
Back to Search ResultsBack to Search Results