Linux Certif

Toute la documentation sur la certification Linux LPI

tcpdmatch

̾Á°

tcpdmatch - tcp wrapper ¤Î¿ÀÂ÷½ê(oracle)

½ñ¼°

tcpdmatch [-d] [-i inet_conf] daemon client

tcpdmatch [-d] [-i inet_conf] daemon[@server] [user@]client

ÀâÌÀ

tcpdmatch ¤Ï¡¢»ØÄꤵ¤ì¤¿¥ê¥¯¥¨¥¹¥È¤ò tcp wrapper ¤¬¤É¤Î¤è ¤¦¤Ë¼è¤ê°·¤¦¤Î¤«Àꤦ¤â¤Î¤Ç¤¢¤ë¡£

¤³¤Î¥×¥í¥°¥é¥à¤Ï tcpd ¤Î¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¥Æ¡¼¥Ö¥ë (¥Ç¥Õ¥© ¥ë¥È¤Ï/etc/hosts.allow ¤È /etc/hosts.deny) ¤ò¾ÜºÙ¤Ë Ä´¤Ù¡¢·ë²Ì¤ò¹ð¤²¤ë¡£¤½¤ÎºÝ¡¢Àµ³Î¤ò´ü¤¹¤¿¤á¤Ë¡¢inetd ¤Þ¤¿¤Ï tlid ¥Í¥Ã¥È¥ï¡¼¥¯ÀßÄê¥Õ¥¡¥¤¥ë¤â»²¾È¤·¡¢ÄɲþðÊó¤òÆÀ¤ë¡£

tcpdmatch ¤Ï¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¥Æ¡¼¥Ö¥ëÃ椫¤é¥Þ¥Ã¥Á¤¹¤ë¤â ¤Î¤ò¸«¤Ä¤±¤ë¤È¡¢¤½¤ì¤¬°ìÃפ·¤¿¥ë¡¼¥ë¤Ç¤¢¤ë¤ÈÀë¸À¤¹¤ë¡£¤¯¤ï¤¨¤Æ¡¢ ¥ª¥×¥·¥ç¥Ê¥ë¤Ê¥·¥§¥ë¥³¥Þ¥ó¥É¤Ê¤¤¤·¤Ï¥ª¥×¥·¥ç¥ó¤òÆɤߤ䤹¤¤·Á¤Ë¥Õ¥©¡¼ ¥Þ¥Ã¥È¤·¤Æɽ¼¨¤¹¤ë¡£¤³¤ì¤Ï¡¢Ë¾¤ó¤Ç¤¤¤ë¤â¤Î¤È¡¢¥×¥í¥°¥é¥à¤¬²ò¼á¤· ¤Æ¤¤¤ë¤³¤È¤Î´Ö¤ÎÌ·½â¤ò¸«¶Ë¤á¤ë¤Î¤ËÌò¤Ë¤¿¤Ä¡£

°ú¤­¿ô

¼¡¤Ë¼¨¤¹¤Õ¤¿¤Ä¤Î°ú¤­¿ô¤Ï¡¢¾ï¤ËɬÍפǤ¢¤ë:

daemon

¥Ç¡¼¥â¥ó¥×¥í¥»¥¹Ì¾¡£°ìÈÌŪ¤Ë¤Ï¥Ç¡¼¥â¥ó¤Î¼Â¹Ô¥Ñ¥¹¤ÎºÇ¸å¤ÎÍ×ÁǤÈƱ ¤¸¤Ç¤¢¤ë¡£

client

¥¯¥é¥¤¥¢¥ó¥È¤Î¥Û¥¹¥È̾¡¢¤¢¤ë¤¤¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¡£¤Þ¤¿¤Ï `unknown' `paranoid' ¤Î¤¤¤º¤ì¤«¤Ë¤è¤Ã¤Æɽ¸½¤µ¤ì¤ë¥ï¥¤¥ë¥É¥«¡¼¥É¡£

¥¯¥é¥¤¥¢¥ó¥È¥Û¥¹¥È̾¤¬Ä󼨤µ¤ì¤¿¾ì¹ç¡¢ tcpdmatch ¤Ï ¤½¤Î¥¯¥é¥¤¥¢¥ó¥È¥¢¥É¥ì¥¹¤òͽ¸À¤¹¤ë¡£

¥¯¥é¥¤¥¢¥ó¥È¤Î¥¢¥É¥ì¥¹¤¬Ä󼨤µ¤ì¤¿¾ì¹ç¡¢ tcpdmatch ¤Ï¡¢ ¥¯¥é¥¤¥¢¥ó¥È¤Î¥Û¥¹¥È̾¤ÎÌ䤤¹ç¤ï¤»¤¬¼ºÇÔ¤·¤¿¾ì¹ç¤Ë tcpd ¤¬¤É¤Î¤è¤¦¤Ë¤Õ¤ë¤Þ¤¦¤«¤òͽ¸À¤¹¤ë¡£

daemon@server ·Á¼°¤ÇÉղþðÊó¤ò¼¨¤¹¾ì¹ç:

server

¥µ¡¼¥Ð¤Î¥Û¥¹¥È̾¡¢¤¢¤ë¤¤¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¡£¤Þ¤¿¤Ï `unknown' `paranoid' ¤Î¤¤¤º¤ì¤«¤Ë¤è¤Ã¤Æɽ¸½¤µ¤ì¤ë¥ï¥¤¥ë¥É¥«¡¼¥É¡£ ¾Êά»þ¤Î¥µ¡¼¥Ð̾¤Ï `unknown' ¤Ç¤¢¤ë¡£

user@client ·Á¼°¤ÇÉղþðÊó¤ò¼¨¤¹¾ì¹ç:

user

¥¯¥é¥¤¥¢¥ó¥È¥æ¡¼¥¶¤Î¿È¸µ¡£°ìÈÌŪ¤Ë¤Ï¥í¥°¥¤¥ó̾¤Þ¤¿¤Ï¥æ¡¼¥¶ID¤Ç¤¢ ¤ë¡£¾Êά»þ¤Î¥æ¡¼¥¶Ì¾¤Ï `unknown' ¤Ç¤¢¤ë¡£

¥ª¥×¥·¥ç¥ó

-d

¥·¥¹¥Æ¥à¤Î¥Ç¥Õ¥©¥ë¥È¤Î¥Õ¥¡¥¤¥ë¤Ç¤Ê¤¯¡¢¥«¥ì¥ó¥È¥Ç¥£¥ì¥¯¥È¥ê¤Ë¤¢¤ë hosts.allow ¤È hosts.deny ¤ò¸¡ºº¤¹¤ë¡£

-i inet_conf

tcpdchk ¤¬ inetd.conf ¤Þ¤¿¤Ï tlid.conf ¤ò¼«Ê¬ ¤Ç¸«¤Ä¤±¤ë¤³¤È¤¬¤Ç¤­¤Ê¤¤¾ì¹ç¡¢¤¢¤ë¤¤¤Ï¥×¥í¥°¥é¥à¤¬¤Þ¤Á¤¬¤Ã¤¿¥Õ¥¡ ¥¤¥ë¤ò»²¾È¤·¤Æ¤¤¤ëµ¿¤¤¤¬¤¢¤ë¾ì¹ç¤Ë¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»È¤¦¡£

Îã

¥í¡¼¥«¥ë¥Û¥¹¥È¤«¤é telnet ¤Î¥ê¥¯¥¨¥¹¥È¤¬Í褿»þ¡¢tcpd ¤¬¤É¤Î¤è¤¦¤Ë¤Õ¤ë¤Þ¤¦¤«¤òÀꤦ¤Ë¤Ï:

      tcpdmatch in.telnetd localhost

Ʊ¤¸¤³¤È¤ò¡¢¥Û¥¹¥È̾¤ÎÌ䤤¹ç¤ï¤»¤¬¼ºÇÔ¤·¤¿¤«¤Î¤è¤¦¤Ë¤Õ¤ë¤Þ¤Ã¤ÆÀê ¤¦¤Ë¤Ï:

      tcpdmatch in.telnetd 127.0.0.1

¤â¤·¥¯¥é¥¤¥¢¥ó¥È¤Î̾Á°¤¬¥¢¥É¥ì¥¹¤È°ìÃפ·¤Ê¤¤¾ì¹ç¡¢tcpd ¤¬ ¤É¤¦¤¹¤ë¤«¤òÀꤦ¤Ë¤Ï:

      tcpdmatch in.telnetd paranoid

¥·¥¹¥Æ¥à¤Ë¤è¤Ã¤Æ¤Ï¡¢¥Ç¡¼¥â¥ó¤Î̾Á°¤ÎƬ¤Ë 'in.' ¤¬¤Ê¤«¤Ã¤¿¤ê¡¢ tcpdmatch ¤¬ inetd ¤ÎÀßÄê¥Õ¥¡¥¤¥ë¤ò¸«¤Ä¤±¤ë¤¿¤á¤Ë½õ¤±¤òɬ ÍפȤ¹¤ë¤«¤âÃΤì¤Ê¤¤¡£

¥Õ¥¡¥¤¥ë

tcpd ¤Î¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¥Õ¥¡¥¤¥ë¤Î¥Ç¥Õ¥©¥ë¥È¤Ï:

/etc/hosts.allow
/etc/hosts.deny

´ØÏ¢¹àÌÜ

tcpdchk(8), tcp wrapper ÀßÄê¤Î¥Á¥§¥Ã¥«¡¼

hosts_access(5), ¥Û¥¹¥È¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¥Õ¥¡¥¤¥ë¤Î½ñ¼°

hosts_options(5), ¥Û¥¹¥È¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¤Î³ÈÄ¥½ñ¼°

inetd.conf(5), inetd ¥³¥ó¥È¥í¡¼¥ë¥Õ¥¡¥¤¥ë¤Î½ñ¼°

tlid.conf(5), tlid ¥³¥ó¥È¥í¡¼¥ë¥Õ¥¡¥¤¥ë¤Î½ñ¼°

 

Ãø¼Ô

Wietse Venema (wietse@wzv.win.tue.nl),

Department of Mathematics and Computing Science,

Eindhoven University of Technology

Den Dolech 2, P.O. Box 513, 

5600 MB Eindhoven, The Netherlands

 

ËÝÌõ

FUKUSHIMA Osamu <fuku@amorph.rim.or.jp>