HP-UX Internet Services Administrator's Guide (August 2003)

TCP Wrappers
The tcpd Features
Chapter 346
configuration file. If you enable client user name lookup in the
configuration file, tcpd assumes that the client requesting the service
runs a RFC931-compliant daemon, such as IDENT.
Trap Setting
This feature allows you to trigger appropriate action on the host
depending on the number of denied connection attempts. For example,
the following rule in the /etc/hosts.deny file denies access to all hosts,
and notifies when a remote host attempts to access the TFTP server:
tftpd:ALL:spawn (/usr/bin/safe_finger -1 @%h2>&1| mailx -s “re
mote tftp attempt” root)
Banner Message
This feature provides a mechanism to send a message when an ACL rule
is included in an access control file. For example, the following rule in the
/etc/hosts.deny file sends the message in the telnetd file placed in
the /tmp/banner directory, and denies access to a request from any host
whose address starts with 192.5.2:
telnetd:192.5.2.:banners/tmp/banner