1*2aef6930SMark Murray@(#) BLURB 1.28 97/03/21 19:27:18 2*2aef6930SMark Murray 3*2aef6930SMark MurrayWith this package you can monitor and filter incoming requests for the 4*2aef6930SMark MurraySYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other 5*2aef6930SMark Murraynetwork services. 6*2aef6930SMark Murray 7*2aef6930SMark MurrayThe package provides tiny daemon wrapper programs that can be installed 8*2aef6930SMark Murraywithout any changes to existing software or to existing configuration 9*2aef6930SMark Murrayfiles. The wrappers report the name of the client host and of the 10*2aef6930SMark Murrayrequested service; the wrappers do not exchange information with the 11*2aef6930SMark Murrayclient or server applications, and impose no overhead on the actual 12*2aef6930SMark Murrayconversation between the client and server applications. 13*2aef6930SMark Murray 14*2aef6930SMark MurrayThis patch upgrades the tcp wrappers version 7.5 source code to 15*2aef6930SMark Murrayversion 7.6. The source-routing protection in version 7.5 was not 16*2aef6930SMark Murrayas strong as it could be. And all this effort was not needed with 17*2aef6930SMark Murraymodern UNIX systems that can already stop source-routed traffic in 18*2aef6930SMark Murraythe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux. 19*2aef6930SMark Murray 20*2aef6930SMark MurrayThis release does not introduce new features. Do not bother applying 21*2aef6930SMark Murraythis patch when you built your version 7.x tcp wrapper without 22*2aef6930SMark Murrayenabling the KILL_IP_OPTIONS compiler switch; when you can disable 23*2aef6930SMark MurrayIP source routing options in the kernel; when you run a UNIX version 24*2aef6930SMark Murraythat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to 25*2aef6930SMark Murrayreceive source-routed connections and are therefore not vulnerable 26*2aef6930SMark Murrayto IP spoofing attacks with source-routed TCP connections. 27*2aef6930SMark Murray 28*2aef6930SMark MurrayA complete change log is given in the CHANGES document. As always, 29*2aef6930SMark Murrayproblem reports and suggestions for improvement are welcome. 30*2aef6930SMark Murray 31*2aef6930SMark Murray Wietse Venema (wietse@wzv.win.tue.nl), 32*2aef6930SMark Murray Department of Mathematics and Computing Science, 33*2aef6930SMark Murray Eindhoven University of Technology, 34*2aef6930SMark Murray The Netherlands. 35*2aef6930SMark Murray 36*2aef6930SMark Murray Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA. 37