Which of the following statements are true about tcp wrappers? Each correct answer represents a complete solution. Choose all that apply.

TCP wrappers (tcpd) provide access control lists, can perform client username lookups via the ident protocol, and log connection attempts - these are core documented features of the host-based access control system.

When inetd receives a connection for a wrapped service, it invokes tcpd (the TCP wrapper daemon) instead of the service directly, allowing tcpd to evaluate access rules before passing the connection along.

TCP wrappers support pattern matching on host IP addresses, subnet addresses, hostnames, and ident query replies in the hosts.allow and hosts.deny configuration files to permit or block connections.

TCP wrappers perform host-based access control at the application layer and cannot prevent IP address spoofing, which must be addressed at the network or packet-filtering layer by a firewall or router.