tcp wrappers problem

From: Edward (edward@Cwci.net)
Date: 06/28/02 

From: "Edward" <edward@Cwci.net>
Date: Fri, 28 Jun 2002 09:33:53 +0100

I've been following http://www.enteract.com/~lspitz/ids.html in an attempt
to detect port scans against my server from hosts on the LAN.

imap has been configured in /etc/inetd.conf:
imap stream tcp nowait root /usr/local/bin/tcpd imap.trap

(imap.trap is simply a script that exits)

/etc/hosts.allow has the following entry:
imap.trap: ALL: spawn (/var/adm/ids.sh %d %h)
%d This variable returns the daemon process .
%h This variable returns the server hostname, and if it can't find it, it
will return the address.

The script /var/adm/ids.sh simply emails an alert to a predefined address
(it also uses Sambas nmblookup to estiblished the login name of the culprit)

The script works if you run it directly...
e.g.
/var/adm/ids.sh imap 172.1.0.1

...but doesn't work if an attempt is made to connect port 143 (imap). There
are no messages waiting in the mailq.

I can only assume that the syntax of the entry in /etc/hosts.allow isn't
correct??

Thanks,

Edward

Relevant Pages

  • Re: sudo without password
    ... If you're setting up an IMAP ... server, you'd just check off or type in "IMAP". ... the firewall would be completely invisible, ... Thus, even without a single port open, you can use ...
    (Ubuntu)
  • Re: How to turn on iMAP for the iPhone
    ... Blackberry which we got working with exchange ok ... should this be the public one or the internal one for the server ... Port 25 is for SMTP and has nothing to do with IMAP, ...
    (microsoft.public.exchange.setup)
  • Re: How to turn on iMAP for the iPhone
    ... Your ISP is suggesting you map the port back to your Exchange server just ... Has anyone setup SSL and port 993 for IMAP? ...
    (microsoft.public.exchange.setup)
  • Re: Retrieving pop mail from gmail/ssl
    ... I have an application that used to retrieve pop3 using the IMAP package. ... Gmail uses POP over SSL on port 995. ... The server error log says: ...
    (comp.lang.php)
  • Re: How to turn on iMAP for the iPhone
    ... IMAP client will need to connect on port 25 in order to send emails. ... then there is no more that you can do at the server ... IMAPis already enabled on Exchange 2003. ...
    (microsoft.public.exchange.setup)