IPv6, 2nd Edition

Chapter 23 • Practical IPv6 Security Solutions 445

the inetd process is running under. Then send that process ID the HUP

signal.

# ps -ef | grep inetd

root 164 1 0 Feb 05 ? 0:08 /usr/sbin/inetd-

s-t

# kill -HUP 164

You’ve just successfully wrapped ftp and telnet with TCP Wrapper.

The last step is to set up the security rules that control connection

authentication.

This part is accomplished using two different files: /etc/hosts.allow and

/etc/hosts.deny. As the names suggest, the former indicates connections

that are permitted, while the latter controls the denial of unwanted con-

nections. When a connection attempt is made, the first rule that matches

the connection information is the one that applies. Also, the first file to

be checked is /etc/hosts.allow. ...