This sounds similar to the problems with the configure script in ucd-snmp-4.2.3 finding tcp_wrappers on Linux/Solaris... there was a patch posted which I believe fixed 4.2.4 and above.... Maybe a compare of the way the ucd-snmp configure and syslog-ng configure finds tcp_wrappers might provide a clue? Ted Jason Buchanan <jsb@cmpnet.com> on 19/12/2002 17:03:58 Please respond to syslog-ng@lists.balabit.hu To: syslog-ng@lists.balabit.hu cc: (bcc: Ted Rule/160GPS/Flextech/UK) Subject: Re: [syslog-ng]Problems getting tcp wrappers to work in Solaris Balazs Scheidler wrote:

On Wed, Dec 18, 2002 at 11:11:38PM -0500, Ed Ravin wrote:

...

Jason Buchanan writes:

...

Can someone pass along the format required for properly implementing tcp wrappers for syslog-ng?

I do this :

in hosts.deny:

syslog-ng: ALL EXCEPT 1.2.3.4

And I don't have a hosts.allow file.

However, the example you posted looked OK - it's possible there's something else wrong. Have you tried strace/ktrace/truss as appropriate for your platform and see if syslog-ng is actually searching for / reading in /etc/hosts.allow and hosts.deny?

Have you configured syslog-ng to actually use TCP wrappers? Hint: check your './configure' output.

configure doesn't seem to work real well. I have tcpd.h in /usr/local/include but configure doesn't find it. I make a symlink so configure could find it in /usr/include but that didn't work either. So I copied libwrap.a to /usr/lib but it still wasn't finding hosts_access in the library, even though I rebuilt tcp wrappers from a freshly-extracted archive. Is there a different tcp wrappers distribution that I should use? This is for Solaris 8. Thanks! Sorry for the long quote - hopefully it will help anyone else who missed the first part of the thread. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html ************************************************************************************************ This E-mail message, including any attachments, is intended only for the person or entity to which it is addressed, and may contain confidential information. If you are not the intended recipient, any review, retransmission, disclosure, copying, modification or other use of this E-mail message or attachments is strictly forbidden. If you have received this E-mail message in error, please contact the author and delete the message and any attachments from your computer. You are also advised that the views and opinions expressed in this E-mail message and any attachments are the author's own, and may not reflect the views and opinions of FLEXTECH Television Limited. ************************************************************************************************