diff options
author | Jason Downs <downsj@cvs.openbsd.org> | 1997-06-24 02:12:27 +0000 |
---|---|---|
committer | Jason Downs <downsj@cvs.openbsd.org> | 1997-06-24 02:12:27 +0000 |
commit | ca63d1c1cc44a3f0a09b2fa1aa70dd43ee6d8faa (patch) | |
tree | 3827c8513aca060f9451ee3f97c0523e3867a9b0 /libexec/tcpd/tcpdchk | |
parent | 98888a8f673b775b3a4a76a1b22ec894734ef078 (diff) |
New mandoc manual pages.
Diffstat (limited to 'libexec/tcpd/tcpdchk')
-rw-r--r-- | libexec/tcpd/tcpdchk/tcpdchk.8 | 158 |
1 files changed, 108 insertions, 50 deletions
diff --git a/libexec/tcpd/tcpdchk/tcpdchk.8 b/libexec/tcpd/tcpdchk/tcpdchk.8 index 736f39e4260..e98f9b3d313 100644 --- a/libexec/tcpd/tcpdchk/tcpdchk.8 +++ b/libexec/tcpd/tcpdchk/tcpdchk.8 @@ -1,67 +1,125 @@ -.\" $OpenBSD: tcpdchk.8,v 1.1 1997/02/26 06:17:08 downsj Exp $ -.TH TCPDCHK 8 -.SH NAME -tcpdchk \- tcp wrapper configuration checker -.SH SYNOPSYS -tcpdchk [-a] [-d] [-i inet_conf] [-v] -.SH DESCRIPTION -.PP -\fItcpdchk\fR examines your tcp wrapper configuration and reports all +.\" $OpenBSD: tcpdchk.8,v 1.2 1997/06/24 02:12:26 downsj Exp $ +.\" +.\" Copyright (c) 1997, Jason Downs. All rights reserved. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" 3. All advertising materials mentioning features or use of this software +.\" must display the following acknowledgement: +.\" This product includes software developed by Jason Downs for the +.\" OpenBSD system. +.\" 4. Neither the name(s) of the author(s) nor the name OpenBSD +.\" may be used to endorse or promote products derived from this software +.\" without specific prior written permission. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) ``AS IS'' AND ANY EXPRESS +.\" OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +.\" WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +.\" DISCLAIMED. IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, +.\" INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +.\" (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +.\" SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER +.\" CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +.\" SUCH DAMAGE. +.\" +.Dd June 23, 1997 +.Dt TCPDCHK 8 +.Os +.Sh NAME +.Nm tcpdchk +.Nd tcp wrapper configuration checker +.Sh SYNOPSYS +.Nm tcpdchk +.Op Fl a +.Op Fl d +.Op Fl i Ar inet_conf +.Op Fl v +.Sh DESCRIPTION +.Pp +.Nm tcpdchk +examines your tcp wrapper configuration and reports all potential and real problems it can find. The program examines the -\fItcpd\fR access control files (by default, these are -\fI/etc/hosts.allow\fR and \fI/etc/hosts.deny\fR), and compares the -entries in these files against entries in the \fIinetd\fR or \fItlid\fR -network configuration files. -.PP -\fItcpdchk\fR reports problems such as non-existent pathnames; services -that appear in \fItcpd\fR access control rules, but are not controlled -by \fItcpd\fR; services that should not be wrapped; non-existent host +.Xr tcpd 8 +access control files (by default, these are +.Pa /etc/hosts.allow +and +.Pa /etc/hosts.deny ) , +and compares the +entries in these files against entries in the +.Xr inetd 8 +network configuration file. +.Pp +.Nm tcpdchk +reports problems such as non-existent pathnames; services +that appear in +.Xr tcpd 8 +access control rules, but are not controlled by +.Xr tcpd 8 ; +services that should not be wrapped; non-existent host names or non-internet address forms; occurrences of host aliases instead of official host names; hosts with a name/address conflict; inappropriate use of wildcard patterns; inappropriate use of NIS netgroups or references to non-existent NIS netgroups; references to non-existent options; invalid arguments to options; and so on. -.PP -Where possible, \fItcpdchk\fR provides a helpful suggestion to fix the -problem. -.SH OPTIONS -.IP -a +.Pp +Where possible, +.Nm tcpdchk +provides a helpful suggestion to fix the problem. +.Sh OPTIONS +.Bl -tag -width XXXXXXXXXXXX +.It Fl a Report access control rules that permit access without an explicit -ALLOW keyword. This applies only when the extended access control -language is enabled (build with -DPROCESS_OPTIONS). -.IP -d -Examine \fIhosts.allow\fR and \fIhosts.deny\fR files in the current -directory instead of the default ones. -.IP "-i inet_conf" -Specify this option when \fItcpdchk\fR is unable to find your -\fIinetd.conf\fR or \fItlid.conf\fR network configuration file, or when -you suspect that the program uses the wrong one. -.IP -v +ALLOW keyword. +.\" This applies only when the extended access control +.\" language is enabled (build with -DPROCESS_OPTIONS). +.It Fl d +Examine +.Pa hosts.allow +and +.Pa hosts.deny +files in the current directory instead of the default ones. +.It Fl i Ar inet_conf +Specify this option when +.Nm tcpdchk +is unable to find your +.Pa inetd.conf +network configuration file, or when you wish to test with a non-default one. +.It Fl v Display the contents of each access control rule. Daemon lists, client lists, shell commands and options are shown in a pretty-printed format; this makes it easier for you to spot any discrepancies between what you want and what the program understands. -.SH FILES -.PP -The default locations of the \fItcpd\fR access control tables are: -.PP -/etc/hosts.allow -.br -/etc/hosts.deny -.SH SEE ALSO -.na -.nf -tcpdmatch(8), explain what tcpd would do in specific cases. -hosts_access(5), format of the tcpd access control tables. -hosts_options(5), format of the language extensions. -inetd.conf(5), format of the inetd control file. -tlid.conf(5), format of the tlid control file. -.SH AUTHORS -.na -.nf +.Sh FILES +.Pp +The default locations of the +.Xr tcpd 8 +access control tables are: +.Pp +.Bl -tag -width /etc/hosts.allow -compact +.It Pa /etc/hosts.allow +Access control table (allow list) +.It Pa /etc/hosts.deny +Access control table (deny list) +.El +.Sh SEE ALSO +.Xr hosts_access 5 , +.Xr hosts_options 5 , +.Xr inetd.conf 5 , +.Xr tcpdmatch 8 . +.Sh AUTHOR +.Bd -unfilled -offset indent Wietse Venema (wietse@wzv.win.tue.nl), Department of Mathematics and Computing Science, Eindhoven University of Technology Den Dolech 2, P.O. Box 513, 5600 MB Eindhoven, The Netherlands +.Ed \" @(#) tcpdchk.8 1.3 95/01/08 17:00:30 |