Subject: bin/10754: missing explanation of missing tcpd
To: None <gnats-bugs@gnats.netbsd.org>
From: None <reed@reedmedia.net>
List: netbsd-bugs
Date: 08/04/2000 09:16:16
>Number:         10754
>Category:       bin
>Synopsis:       tcpd is not provided. It's functionality is in inetd.
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          doc-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Aug 04 09:17:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     Jeremy C. Reed
>Release:        NetBSD-current source date
>Organization:
>Environment:
System: NetBSD rainier 1.4.2 NetBSD 1.4.2 (JCR1) #3: Wed Mar 29 00:24:33 PST 2000 reed@rainier:/home/src/sys/arch/i386/compile/JCR1 i386


>Description:
	The explanation that the tcp_wrapper functionality in inetd
        is not fully documented.
>How-To-Repeat:
	The inetd manual page doesn't explain the libwrap support.
	A tcpd manual page doesn't exist.
>Fix:
A manual page for tcpd.8 may help. A manual page follow. Please send any
suggestions or ideas to make it better (if needed). Please consider adding
this to /usr/src/lib/libwrap or /usr/src/usr.sbin/inetd and add to
/usr/src/lib/libwrap/Makefile or /usr/src/usr.sbin/inetd/Makefile.

.Dd August 4, 2000
.Dt TCPD 8
.Os NetBSD
.Sh NAME
.Nm tcpd
.Nd access control facility for internet services
.Sh DESCRIPTION
Also known as tcp wrappers,
.Nm
can be used to monitor and filter incoming requests for network services.
Basically, tcpd can be used to log connection requests and to determine
whether a client is allowed to connect to a service.

If you really had tcpd installed, you would not have received this
manual page.

tcpd is often used with inetd.
In November 1996, libwrap support was added to NetBSD's inetd to provide
internal tcpd-like functionality. (A few other services, such as
sendmail, are also built with libwrap support.) inetd uses
\fI/etc/hosts.allow\fR and \fI/etc/hosts.deny\fR as tcpd does. tcpd is
not needed. You do not need to change the \fI/etc/inetd.conf\fR
server-program entry to use tcpd.

For details, see the \fIhosts_access\fR(5) manual page.
.Pp
.Sh FILES
.Bl -tag -width /etc/hosts.allow -compact
.It /etc/hosts.allow
.It /etc/hosts.deny
.El
.Sh SEE ALSO
.Xr hosts_access 5 ,
.Xr hosts_options 5 ,
.Xr inetd 8 ,
.Xr inetd.conf 5 ,
.Xr tcpdchk 8 ,
.Xr tcpdmatch 8
.Sh BUGS
No Programmer's Manuals exist for /usr/include/tcpd.h or libwrap.
Also, the inetd(8) manual does not properly document this internal
access control support.
.Sh HISTORY
libwrap is based on Wietse Venema's tcp_wrappers.
.Pp
>Release-Note:
>Audit-Trail:
>Unformatted: