10Sstevel@tonic-gate@(#) BLURB 1.28 97/03/21 19:27:18
20Sstevel@tonic-gate
30Sstevel@tonic-gateWith this package you can monitor and filter incoming requests for the
40Sstevel@tonic-gateSYSTAT, FINGER, FTP, TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other
50Sstevel@tonic-gatenetwork services.
60Sstevel@tonic-gate
70Sstevel@tonic-gateThe package provides tiny daemon wrapper programs that can be installed
80Sstevel@tonic-gatewithout any changes to existing software or to existing configuration
90Sstevel@tonic-gatefiles.  The wrappers report the name of the client host and of the
100Sstevel@tonic-gaterequested service; the wrappers do not exchange information with the
110Sstevel@tonic-gateclient or server applications, and impose no overhead on the actual
120Sstevel@tonic-gateconversation between the client and server applications.
130Sstevel@tonic-gate
140Sstevel@tonic-gateThis patch upgrades the tcp wrappers version 7.5 source code to
150Sstevel@tonic-gateversion 7.6.  The source-routing protection in version 7.5 was not
160Sstevel@tonic-gateas strong as it could be. And all this effort was not needed with
170Sstevel@tonic-gatemodern UNIX systems that can already stop source-routed traffic in
180Sstevel@tonic-gatethe kernel. Examples are 4.4BSD derivatives, Solaris 2.x, and Linux.
190Sstevel@tonic-gate
200Sstevel@tonic-gateThis release does not introduce new features. Do not bother applying
210Sstevel@tonic-gatethis patch when you built your version 7.x tcp wrapper without
220Sstevel@tonic-gateenabling the KILL_IP_OPTIONS compiler switch; when you can disable
230Sstevel@tonic-gateIP source routing options in the kernel; when you run a UNIX version
240Sstevel@tonic-gatethat pre-dates 4.4BSD, such as SunOS 4. Such systems are unable to
250Sstevel@tonic-gatereceive source-routed connections and are therefore not vulnerable
260Sstevel@tonic-gateto IP spoofing attacks with source-routed TCP connections.
270Sstevel@tonic-gate
280Sstevel@tonic-gateA complete change log is given in the CHANGES document.  As always,
290Sstevel@tonic-gateproblem reports and suggestions for improvement are welcome.
300Sstevel@tonic-gate
310Sstevel@tonic-gate	Wietse Venema (wietse@wzv.win.tue.nl),
320Sstevel@tonic-gate	Department of Mathematics and Computing Science,
330Sstevel@tonic-gate	Eindhoven University of Technology,
340Sstevel@tonic-gate	The Netherlands.
350Sstevel@tonic-gate
360Sstevel@tonic-gate	Currently visiting IBM T.J. Watson Research, Hawthorne NY, USA.
370Sstevel@tonic-gate