tcpwrapped? from nmap scan.

deepsix · 10-26-2008, 02:45 AM

just curious... what does tcpwrapped means comming from a nmap scan? first i just thought it meant that the port was firewalled ... but after googling im not so sure ... plus scanning other firewalled machines doesnt show this.

any help or input appreciated.

deepsix · 10-27-2008, 01:02 AM

Quote:

Originally Posted by deepsix

just curious... what does tcpwrapped means comming from a nmap scan? first i just thought it meant that the port was firewalled ... but after googling im not so sure ... plus scanning other firewalled machines doesnt show this.

any help or input appreciated.

all i could find that really didnt make sense was something to do with rpcbind.

lol im not answering myself just putting that info out in case someone was interested.

IamSpOOk · 02-15-2009, 04:16 AM

tcp wrappers uses a modification to how inetd or xinetd would launch a program/service so that, in inetd.conf

telnet stream tcp nowait root /usr/sbin/in.telnetd in.telnetd

would change to

telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd

THEN, hosts.deny and hosts.allow are used to control access from given IP addresses: eg

hosts.allow
sendmail : 192.168.55.0/255.255.255.0

hosts.deny
ALL : ALL

Tcp wrappers provides an extra layer of protection over and above what might be supplied by, for example iptables.

caravan · 10-05-2010, 01:17 PM

It could be a honeypot

Hangdog42 · 10-05-2010, 03:17 PM

Please pay a bit of attention to the date when you reply to a post. This one is two years old, and really didn't need to be resurrected.

win32sux · 10-05-2010, 05:55 PM

Closed for reasons stated above.