ok...check the /etc/inetd.conf:
if it has the /usr/sbin/tcpd running in front of the pop service good. That means
your tcp wrapper is intercepting the various service requests going to inetd
(telnetd, popper, etc..)

now check the /etc/hosts.allow, /etc/hosts.deny:

this is the one restricting the access:
for example if i want to allow  the ips 123.121.144.xxx
you want to have
in /etc/hosts.allow:
in.telnetd: 123.121.144.*
and in /etc/hosts.deny:
intelnetd: all

restricting access only to the 123.121.144.xxx ips....

you've got yourself a check.

my recommendation? check up tcpserver...its much more faster, robust and elegant
in handling services, especially the smtp, and pop3d. umm..check up www.qmail.org
to find where this is....

cheers,


Ray Olszewski wrote:

> I haven't actually done this, but tcpwrappers should allow you to restrict
> pop3 access to machines from your LAN. Look at the man pages for tcpd and
> hosts_access for the details. Also look at the lines for telnet and ftp in
> /etc/inetd.conf -- they are probably already set up to use tcpd (actually,
> depending in distribution and version, pop3 may also be, and you just need
> to implement the allow and deny lists).
>
> At 11:37 AM 1/6/99 +1100, Rod Farmer wrote:
> >Hi everyone,
> >       I'm in a bit of a bind.  I have activiated the POP server to allow
> >people remote downloading of their office mail from the Linux box.
> >
> >One of the staff members though constantly leaves the mail on the machine at
> >home and then deletes it instead of leaving it on the server.
> >
> >Is there someone that I can shut down their remote pop access whilst allowing
> >them still to have pop access from within the network here?
> >
> >
> >Thanks a lot for your help everyone.
> >
> >
> >Rod Farmer
> >Hearne Scientific Software
> >.
> >
> >
> >
> ------------------------------------"Never tell me the odds!"---
> Ray Olszewski                                        -- Han Solo
> 762 Garland Drive
> Palo Alto, CA  94303-3603
> 650.321.3561 voice     650.322.1209 fax          [EMAIL PROTECTED]
> ----------------------------------------------------------------

--
Omer Ansari
Network Engineer,
Supernet PDSL
PK.

Reply via email to