Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I utilize TCP wrappers to secure services running on my machine. Things like webmail, cpanel, whostmgrd, and so on. I use the hosts.allow/hosts.deny files to facilitate this.

Is it possible for an intruder to bypass tcp_wrappers in order to gain access to my services?

share|improve this question
up vote 2 down vote accepted

There wouldn't be much value to it if it could be bypassed, now, would it?

There are a number of scenarios in which TCP wrappers might be made ineffective, though. Misconfiguration is almost certainly the most likely -- a mistaken netmask, misspelling of a service name, and so on. You might also be running a service which doesn't support TCP wrappers, which is more common than you might think, and not realise it (configure it in hosts.deny, but nothing ever happens). Then there's bugs, which these days I'd consider "unlikely", but you should never discount them completely.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.