186d7f5d3SJohn Marino@(#) BLURB 1.28 97/03/21 19:27:18 286d7f5d3SJohn Marino 386d7f5d3SJohn MarinoWith this package you can monitor and filter incoming requests for the 486d7f5d3SJohn MarinoSYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other 586d7f5d3SJohn Marinonetwork services. 686d7f5d3SJohn Marino 786d7f5d3SJohn MarinoThe package provides tiny daemon wrapper programs that can be installed 886d7f5d3SJohn Marinowithout any changes to existing software or to existing configuration 986d7f5d3SJohn Marinofiles. The wrappers report the name of the client host and of the 1086d7f5d3SJohn Marinorequested service; the wrappers do not exchange information with the 1186d7f5d3SJohn Marinoclient or server applications, and impose no overhead on the actual 1286d7f5d3SJohn Marinoconversation between the client and server applications. 1386d7f5d3SJohn Marino 1486d7f5d3SJohn MarinoThis patch upgrades the tcp wrappers version 7.5 source code to 1586d7f5d3SJohn Marinoversion 7.6. The source-routing protection in version 7.5 was not 1686d7f5d3SJohn Marinoas strong as it could be. And all this effort was not needed with 1786d7f5d3SJohn Marinomodern UNIX systems that can already stop source-routed traffic in 1886d7f5d3SJohn Marinothe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux. 1986d7f5d3SJohn Marino 2086d7f5d3SJohn MarinoThis release does not introduce new features. Do not bother applying 2186d7f5d3SJohn Marinothis patch when you built your version 7.x tcp wrapper without 2286d7f5d3SJohn Marinoenabling the KILL_IP_OPTIONS compiler switch; when you can disable 2386d7f5d3SJohn MarinoIP source routing options in the kernel; when you run a UNIX version 2486d7f5d3SJohn Marinothat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to 2586d7f5d3SJohn Marinoreceive source-routed connections and are therefore not vulnerable 2686d7f5d3SJohn Marinoto IP spoofing attacks with source-routed TCP connections. 2786d7f5d3SJohn Marino 2886d7f5d3SJohn MarinoA complete change log is given in the CHANGES document. As always, 2986d7f5d3SJohn Marinoproblem reports and suggestions for improvement are welcome. 3086d7f5d3SJohn Marino 3186d7f5d3SJohn Marino Wietse Venema (wietse@wzv.win.tue.nl), 3286d7f5d3SJohn Marino Department of Mathematics and Computing Science, 3386d7f5d3SJohn Marino Eindhoven University of Technology, 3486d7f5d3SJohn Marino The Netherlands. 3586d7f5d3SJohn Marino 3686d7f5d3SJohn Marino Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA. 37