TCP Wrapper on Linux Dedicated Servers

Posted: November 6th, 2009 under Dedicated Server Hosting, Linux Dedicated server, dedicated servers.
Tags: , ,

TCP Wrapper actually acts as a firewall for your Linux based dedicated server hosting. The reason it is referred to a kind of firewall is the fact that the incoming packets are monitored by the TCP Wrapper. If you have a Linux dedicated server then it might be possible that a hacker attempts to login into your Linux dedicated server.

TCP Wrapper will check if the external source is authorized to connect to the server. If it is not authorized, the login permission will be denied and if it is authorized, the login attempt will be successful. For this reason, you can also call TCP Wrapper as a domain computer program. It is one of the best programs available to keep hackers away from your Linux based dedicated server hosting.

This program was basically developed as your Linux dedicated server is connected to the network and it is necessary to filter the network before the server anyone can gain access to the server. TCP Wrapper is indeed a very good program, however, you can read below to find out how does it work.

When someone tries to login into the server, “/etc/hosts.allow†is checked for an entry file. If it is present, it is possible to continue. Even if this is not found, it is possible to continue. However, “/etc/hosts.deny†file is checked. If there are no matches found this time too, you will be able to continue, however, if a match is found this time, you won’t be able to continue and the service will be blocked.

For better understanding about this, you can go through the below example:

Example “/etc/hosts.deny” file:

SSHD: 192.168.1.1

If the above file is present, it will block access to the computer with IP address, 192.168.1.1.

Note : It’s when someone from the computer with the IP address, 192.168.1.1 tries to login via SSH, it is possible for you to run commands on your Linux dedicated server.

The below command will send an email to the email address you have registered.

sshd: 192.168.1.1: spawn (echo -e “%d %h %H %u”| /bin/mail -s ‘hosts.deny entry’ root)
Important : It is possible for you to run commands in “/etc/hosts.allow” if you would like to receive emails for successful login attempts on your Linux based dedicated server hosting.

[Post to Twitter] Tweet This

No Comments »

No comments yet.

RSS feed for comments on this post. TrackBack URL

Leave a comment