Updated: 2022/Sep/29

Please read Privacy Policy. It's for your privacy.

TCPDMATCH(8)                System Manager's Manual               TCPDMATCH(8)



NAME
       tcpdmatch - tcp wrapper oracle

SYNOPSIS
       tcpdmatch [-d] [-i inet_conf] daemon client

       tcpdmatch [-d] [-i inet_conf] daemon[@server] [user@]client

DESCRIPTION
       tcpdmatch predicts how the tcp wrapper would handle a specific request
       for service.  Examples are given below.

       The program examines the tcpd access control tables (default
       /etc/hosts.allow and /etc/hosts.deny) and prints its conclusion.  For
       maximal accuracy, it extracts additional information from your inetd or
       tlid network configuration file.

       When tcpdmatch finds a match in the access control tables, it
       identifies the matched rule. In addition, it displays the optional
       shell commands or options in a pretty-printed format; this makes it
       easier for you to spot any discrepancies between what you want and what
       the program understands.

ARGUMENTS
       The following two arguments are always required:

       daemon A daemon process name. Typically, the last component of a daemon
              executable pathname.

       client A host name or network address, or one of the `unknown' or
              `paranoid' wildcard patterns.

              When a client host name is specified, tcpdmatch gives a
              prediction for each address listed for that client.

              When a client address is specified, tcpdmatch predicts what tcpd
              would do when client name lookup fails.

       Optional information specified with the daemon@server form:

       server A host name or network address, or one of the `unknown' or
              `paranoid' wildcard patterns. The default server name is
              `unknown'.

       Optional information specified with the user@client form:

       user   A client user identifier. Typically, a login name or a numeric
              userid.  The default user name is `unknown'.

OPTIONS
       -d     Examine hosts.allow and hosts.deny files in the current
              directory instead of the default ones.

       -i inet_conf
              Specify this option when tcpdmatch is unable to find your
              inetd.conf or tlid.conf network configuration file, or when you
              suspect that the program uses the wrong one.

EXAMPLES
       To predict how tcpd would handle a telnet request from the local
       system:

            tcpdmatch in.telnetd localhost

       The same request, pretending that hostname lookup failed:

            tcpdmatch in.telnetd 127.0.0.1

       To predict what tcpd would do when the client name does not match the
       client address:

            tcpdmatch in.telnetd paranoid

       On some systems, daemon names have no `in.' prefix, or tcpdmatch may
       need some help to locate the inetd configuration file.

FILES
       The default locations of the tcpd access control tables are:

       /etc/hosts.allow
       /etc/hosts.deny

SEE ALSO
       tcpdchk(8), tcpd configuration checker
       hosts_access(5), format of the tcpd access control tables.
       hosts_options(5), format of the language extensions.
       inetd.conf(5), format of the inetd control file.

AUTHORS
       Wietse Venema (wietse@wzv.win.tue.nl),
       Department of Mathematics and Computing Science,
       Eindhoven University of Technology
       Den Dolech 2, P.O. Box 513,
       5600 MB Eindhoven, The Netherlands


BUGS
       If you specify FQDN hostname as client, they will be recognized only as
       IPv4 or IPv6 address, which should be recognized as both.



                                                                  TCPDMATCH(8)