---
name: "tcpdmatch"
section: "8"
platform: "linux"
package: "tcpd"
version: "7.6.q-36"
release: "Debian 13 (Trixie)"
platforms: ["linux", "freebsd"]
url: "https://new.carta.tech/tcpdmatch"
---

# tcpdmatch(8)

tcp wrapper oracle

## NAME

tcpdmatch - tcp wrapper oracle

## SYNOPSIS

tcpdmatch \[-d\] \[-i inet\_conf\] daemon client

tcpdmatch \[-d\] \[-i inet\_conf\] daemon\[@server\] \[user@\]client

## DESCRIPTION

*tcpdmatch* predicts how the tcp wrapper would handle a specific request for service.  Examples are given below.

The program examines the *tcpd* access control tables (default */etc/hosts.allow* and */etc/hosts.deny*) and prints its conclusion.  For maximal accuracy, it extracts additional information from your *inetd* network configuration file.

When *tcpdmatch* finds a match in the access control tables, it identifies the matched rule. In addition, it displays the optional shell commands or options in a pretty-printed format; this makes it easier for you to spot any discrepancies between what you want and what the program understands.

## ARGUMENTS

The following two arguments are always required:

- daemon

  A daemon process name. Typically, the last component of a daemon executable pathname.

- client

  A host name or network address, or one of the \`unknown´ or \`paranoid´ wildcard patterns.

  When a client host name is specified, *tcpdmatch* gives a prediction for each address listed for that client.

  When a client address is specified, *tcpdmatch* predicts what *tcpd* would do when client name lookup fails.

Optional information specified with the *daemon@server* form:

- server

  A host name or network address, or one of the \`unknown´ or \`paranoid´ wildcard patterns. The default server name is \`unknown´.

Optional information specified with the *user@client* form:

- user

  A client user identifier. Typically, a login name or a numeric userid. The default user name is \`unknown´.

## OPTIONS

- \-d

  Examine *hosts.allow* and *hosts.deny* files in the current directory instead of the default ones.

- \-i inet\_conf

  Specify this option when *tcpdmatch* is unable to find your *inetd.conf* network configuration file, or when you suspect that the program uses the wrong one.

## EXAMPLES

To predict how *tcpd* would handle a telnet request from the local system:

tcpdmatch in.telnetd localhost

The same request, pretending that hostname lookup failed:

tcpdmatch in.telnetd 127.0.0.1

To predict what tcpd would do when the client name does not match the client address:

tcpdmatch in.telnetd paranoid

On some systems, daemon names have no \`in.´ prefix, or *tcpdmatch* may need some help to locate the inetd configuration file.

## FILES

The default locations of the *tcpd* access control tables are:

/etc/hosts.allow\
 /etc/hosts.deny

## SEE ALSO

```
tcpdchk(8), tcpd configuration checker
hosts_access(5), format of the tcpd access control tables.
hosts_options(5), format of the language extensions.
inetd.conf(5), format of the inetd control file.
```

## AUTHORS

```
Wietse Venema (wietse@wzv.win.tue.nl),
Department of Mathematics and Computing Science,
Eindhoven University of Technology
Den Dolech 2, P.O. Box 513,
5600 MB Eindhoven, The Netherlands
```