freebsd stable - Apr 2005 - tcpwrappers problem

Hi,
(using freebsd5.4-stable)

I'm trying to display a ftpd banner with hosts.allow, but it doesn't
work.

I'm using ftpd (/usr/libexec/ftpd) started through inetd.
Ined is started with standard flags: 
/usr/sbin/inetd -wW -C 60

In hosts.allow I have:
ALL : ALL : allow
ALL : ALL : banners /usr/local/etc/banners/
ALL : PARANOID : RFC931 20 : deny

In /usr.../banners/ I've a banner called: ftpd and inetd and ftp etc..
copied the banner to different names to be sure ... ;-)

The directory is world r-x and the banners are world readable. 

When changing for example: ALL:ALL:allow to ALL:ALL:deny, ftpd connections are
blocked, so I assume the wrappers work.

Why isn't my banner displayed?
thanks
didier

----- Original Message ----- 
From: "Didier Wiroth" <didier.wiroth@mcesr.etat.lu>
To: <freebsd-questions@freebsd.org>
Cc: <freebsd-stable@freebsd.org>
Sent: Monday, April 18, 2005 6:26 AM
Subject: tcpwrappers problem

> Hi,
> (using freebsd5.4-stable)
>
> I'm trying to display a ftpd banner with hosts.allow, but it
doesn't
> work.
>
> I'm using ftpd (/usr/libexec/ftpd) started through inetd.
> Ined is started with standard flags:
> /usr/sbin/inetd -wW -C 60
>
> In hosts.allow I have:
> ALL : ALL : allow
> ALL : ALL : banners /usr/local/etc/banners/
> ALL : PARANOID : RFC931 20 : deny
>
> In /usr.../banners/ I've a banner called: ftpd and inetd and ftp etc.. 
> copied the banner to different names to be sure ... ;-)
>
> The directory is world r-x and the banners are world readable.
>
> When changing for example: ALL:ALL:allow to ALL:ALL:deny, ftpd 
> connections are blocked, so I assume the wrappers work.
>
> Why isn't my banner displayed?
> thanks
> didier
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"

At first glance, I would say because you have an "ALL : ALL : allow" 
before you have your "ALL : ALL : banners /usr/local/etc/banners/

With that, it's never making it to the banners entry.

--

Micheal Patterson
Senior Communications Systems Engineer
TSG Incorporated
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

On Mon, 18 Apr 2005, Didier Wiroth wrote:
> Hi,
> (using freebsd5.4-stable)
>
> I'm trying to display a ftpd banner with hosts.allow, but it
doesn't work.
>
> I'm using ftpd (/usr/libexec/ftpd) started through inetd.
> Ined is started with standard flags:
> /usr/sbin/inetd -wW -C 60
>
> In hosts.allow I have:
> ALL : ALL : allow
> ALL : ALL : banners /usr/local/etc/banners/
> ALL : PARANOID : RFC931 20 : deny
I wouldn't use tcpwrapper banners if you're doing more than just
bitching
out the user before kicking them off. Some FTP clients will just ignore
your banner since it won't conform to the FTP protocol specification.

If you want it to display when the user logs into your FTP server, put it
in /etc/ftpmotd. If you want your telnet client to see it, put it in
/etc/motd.

-- 
Doug White                    |  FreeBSD: The Power to Serve
dwhite@gumbysoft.com          |  www.FreeBSD.org