1*0Sstevel@tonic-gate@(#) BLURB 1.28 97/03/21 19:27:18 2*0Sstevel@tonic-gate 3*0Sstevel@tonic-gateWith this package you can monitor and filter incoming requests for the 4*0Sstevel@tonic-gateSYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other 5*0Sstevel@tonic-gatenetwork services. 6*0Sstevel@tonic-gate 7*0Sstevel@tonic-gateThe package provides tiny daemon wrapper programs that can be installed 8*0Sstevel@tonic-gatewithout any changes to existing software or to existing configuration 9*0Sstevel@tonic-gatefiles. The wrappers report the name of the client host and of the 10*0Sstevel@tonic-gaterequested service; the wrappers do not exchange information with the 11*0Sstevel@tonic-gateclient or server applications, and impose no overhead on the actual 12*0Sstevel@tonic-gateconversation between the client and server applications. 13*0Sstevel@tonic-gate 14*0Sstevel@tonic-gateThis patch upgrades the tcp wrappers version 7.5 source code to 15*0Sstevel@tonic-gateversion 7.6. The source-routing protection in version 7.5 was not 16*0Sstevel@tonic-gateas strong as it could be. And all this effort was not needed with 17*0Sstevel@tonic-gatemodern UNIX systems that can already stop source-routed traffic in 18*0Sstevel@tonic-gatethe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux. 19*0Sstevel@tonic-gate 20*0Sstevel@tonic-gateThis release does not introduce new features. Do not bother applying 21*0Sstevel@tonic-gatethis patch when you built your version 7.x tcp wrapper without 22*0Sstevel@tonic-gateenabling the KILL_IP_OPTIONS compiler switch; when you can disable 23*0Sstevel@tonic-gateIP source routing options in the kernel; when you run a UNIX version 24*0Sstevel@tonic-gatethat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to 25*0Sstevel@tonic-gatereceive source-routed connections and are therefore not vulnerable 26*0Sstevel@tonic-gateto IP spoofing attacks with source-routed TCP connections. 27*0Sstevel@tonic-gate 28*0Sstevel@tonic-gateA complete change log is given in the CHANGES document. As always, 29*0Sstevel@tonic-gateproblem reports and suggestions for improvement are welcome. 30*0Sstevel@tonic-gate 31*0Sstevel@tonic-gate Wietse Venema (wietse@wzv.win.tue.nl), 32*0Sstevel@tonic-gate Department of Mathematics and Computing Science, 33*0Sstevel@tonic-gate Eindhoven University of Technology, 34*0Sstevel@tonic-gate The Netherlands. 35*0Sstevel@tonic-gate 36*0Sstevel@tonic-gate Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA. 37