12aef6930SMark Murray@(#) BLURB 1.28 97/03/21 19:27:18 22aef6930SMark Murray 32aef6930SMark MurrayWith this package you can monitor and filter incoming requests for the 42aef6930SMark MurraySYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other 52aef6930SMark Murraynetwork services. 62aef6930SMark Murray 72aef6930SMark MurrayThe package provides tiny daemon wrapper programs that can be installed 82aef6930SMark Murraywithout any changes to existing software or to existing configuration 92aef6930SMark Murrayfiles. The wrappers report the name of the client host and of the 102aef6930SMark Murrayrequested service; the wrappers do not exchange information with the 112aef6930SMark Murrayclient or server applications, and impose no overhead on the actual 122aef6930SMark Murrayconversation between the client and server applications. 132aef6930SMark Murray 142aef6930SMark MurrayThis patch upgrades the tcp wrappers version 7.5 source code to 152aef6930SMark Murrayversion 7.6. The source-routing protection in version 7.5 was not 162aef6930SMark Murrayas strong as it could be. And all this effort was not needed with 172aef6930SMark Murraymodern UNIX systems that can already stop source-routed traffic in 182aef6930SMark Murraythe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux. 192aef6930SMark Murray 202aef6930SMark MurrayThis release does not introduce new features. Do not bother applying 212aef6930SMark Murraythis patch when you built your version 7.x tcp wrapper without 222aef6930SMark Murrayenabling the KILL_IP_OPTIONS compiler switch; when you can disable 232aef6930SMark MurrayIP source routing options in the kernel; when you run a UNIX version 242aef6930SMark Murraythat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to 252aef6930SMark Murrayreceive source-routed connections and are therefore not vulnerable 262aef6930SMark Murrayto IP spoofing attacks with source-routed TCP connections. 272aef6930SMark Murray 282aef6930SMark MurrayA complete change log is given in the CHANGES document. As always, 292aef6930SMark Murrayproblem reports and suggestions for improvement are welcome. 302aef6930SMark Murray 312aef6930SMark Murray Wietse Venema (wietse@wzv.win.tue.nl), 322aef6930SMark Murray Department of Mathematics and Computing Science, 332aef6930SMark Murray Eindhoven University of Technology, 342aef6930SMark Murray The Netherlands. 352aef6930SMark Murray 362aef6930SMark Murray Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA. 37