To libwrap or not to libwrap?

linux4evr5581 · 12-17-2016, 03:13 AM

Do tcpwrappers still serve a useful purpose? I guess fedora stopped supporting them or something. I wanted to use it with nftables for a layered defense.

AwesomeMachine · 12-17-2016, 05:58 AM

iptables is sufficiently flexible to do everything tcp wrappers does. The main draw for tcp wrappers is ease of configuration for handling specific IPs and monitoring encrypted traffic. iptables is more difficult to configure, but it's much more advanced.

linux4evr5581 · 12-17-2016, 12:12 PM

But tcpwrappers work at the application level, while iptables works at the socket level. This makes its good for a layered defence I think as theres diversity going on here...