tcp_wrappers provides support for controlling access to tcp services normally specified by the hosts.allow and hosts.deny files. This may be done using tcpd, a wrapper service, or by linking the service providing daemon code to the libwrap library.

Original version of TCP Wrapper written by Wietse Venema

The tag name is hosts.deny, this should probably actually be tcp_wrappers (normal name of installed package) with synonyms of hosts.deny, hosts.allow, tcpd and libwrap.