19: You have a domain in your LAN named example.com and my133t.org. Allow the Allow the FTP connection only from local domain. Deny the FTP connection from my133t.org.

Answers: 1. vi /etc/hosts.deny vsftpd:ALL EXCEPT .example.com or 1. vi /etc/hosts.deny vsftpd:ALL 2. vi /etc/hosts.allow vsftpd:example.com We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny. There will be three stage…

Security

Question

19: You have a domain in your LAN named example.com and my133t.org. Allow the
Allow the FTP connection only from local domain.
Deny the FTP connection from my133t.org.

Explanation

Answers:

vi /etc/hosts.deny vsftpd:ALL EXCEPT .example.com or
vi /etc/hosts.deny vsftpd:ALL
vi /etc/hosts.allow vsftpd:example.com We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny. There will be three stage access checking

Is access explicitly permitted? Means permitted from /etc/hosts.allow?
Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?
Otherwise, by default permit access if neither condition matched. To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is: Demon_list:client_list:options In Client list can be either domain name or IP address.

Topics

#FTP#access control#vsftpd#TCP wrappers

Community Discussion

No community discussion yet for this question.

Full RH302 Practice