RE: What my O2 might have been doing

Barlow, Graham K (BarlowGK@bp.com)
Wed, 31 Mar 1999 08:40:57 +0100

> What I'd
> like to be able to do is to restrict _all_ access of _any_kind_ to only
> designated IP addresses, either named as sets or individually, but I've
> no idea if that's even possible or not.
>
Alan,

what you need is a freeware package called tcpwrappers. There was a copy of
it on one of the SGI freeware disks, disk 2.0 I think. It gives you fine
control over who can access what service across the net and allows you to
find out more info about who is contacting the machine. The package is
frightening to look at but actually relatively simple to set up, and
extremely versatile when you get to know it. I've run the package on all
SGI boxes I've managed, and _never_ personally encountered a single hitch.
(Be aware that there is a warning against using wrappers on SGI hardware in
the tcpwrapper package, I think this is historical (and perhaps hysterical)
- I would ignore it.)

Cheers, Graham

-- 
Dr Graham Barlow
BP Amoco Chemicals, 100/04, Sunbury, TW16 7LN, UK
Tel: +44 1932 764236  Fax: +44 1932 762177