1*86d7f5d3SJohn Marino@(#) BLURB 1.28 97/03/21 19:27:18 2*86d7f5d3SJohn Marino 3*86d7f5d3SJohn MarinoWith this package you can monitor and filter incoming requests for the 4*86d7f5d3SJohn MarinoSYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other 5*86d7f5d3SJohn Marinonetwork services. 6*86d7f5d3SJohn Marino 7*86d7f5d3SJohn MarinoThe package provides tiny daemon wrapper programs that can be installed 8*86d7f5d3SJohn Marinowithout any changes to existing software or to existing configuration 9*86d7f5d3SJohn Marinofiles. The wrappers report the name of the client host and of the 10*86d7f5d3SJohn Marinorequested service; the wrappers do not exchange information with the 11*86d7f5d3SJohn Marinoclient or server applications, and impose no overhead on the actual 12*86d7f5d3SJohn Marinoconversation between the client and server applications. 13*86d7f5d3SJohn Marino 14*86d7f5d3SJohn MarinoThis patch upgrades the tcp wrappers version 7.5 source code to 15*86d7f5d3SJohn Marinoversion 7.6. The source-routing protection in version 7.5 was not 16*86d7f5d3SJohn Marinoas strong as it could be. And all this effort was not needed with 17*86d7f5d3SJohn Marinomodern UNIX systems that can already stop source-routed traffic in 18*86d7f5d3SJohn Marinothe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux. 19*86d7f5d3SJohn Marino 20*86d7f5d3SJohn MarinoThis release does not introduce new features. Do not bother applying 21*86d7f5d3SJohn Marinothis patch when you built your version 7.x tcp wrapper without 22*86d7f5d3SJohn Marinoenabling the KILL_IP_OPTIONS compiler switch; when you can disable 23*86d7f5d3SJohn MarinoIP source routing options in the kernel; when you run a UNIX version 24*86d7f5d3SJohn Marinothat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to 25*86d7f5d3SJohn Marinoreceive source-routed connections and are therefore not vulnerable 26*86d7f5d3SJohn Marinoto IP spoofing attacks with source-routed TCP connections. 27*86d7f5d3SJohn Marino 28*86d7f5d3SJohn MarinoA complete change log is given in the CHANGES document. As always, 29*86d7f5d3SJohn Marinoproblem reports and suggestions for improvement are welcome. 30*86d7f5d3SJohn Marino 31*86d7f5d3SJohn Marino Wietse Venema (wietse@wzv.win.tue.nl), 32*86d7f5d3SJohn Marino Department of Mathematics and Computing Science, 33*86d7f5d3SJohn Marino Eindhoven University of Technology, 34*86d7f5d3SJohn Marino The Netherlands. 35*86d7f5d3SJohn Marino 36*86d7f5d3SJohn Marino Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA. 37