'tperimeter' Version 1.113 is released and available at: http://www.tundraware.com/Software/tperimeter/ The last public release was 1.112 What's New ---------- Changed the wrapper file rebuild logic to delete outstanding access requests independently of how often the script is run (either by cron, or manually). This means that the 'cron' frequency now determines the average waiting time before a user's request is fulfilled. The '${DURATION}' variable in 'rebuild-hosts.allow.sh' sets how long access will be permitted (The default value is 10 minutes). Minor documentation updates, typo fixes, and housekeeping. What Is 'tperimeter'? --------------------- Have you ever been away from the office and needed, say, ssh access to your system? Ooops - you can't do that because in your zealous pursuit of security, you set your TCP wrappers to prevent outside access to all but a select group of hosts. Worse still, everywhere you go, your local IP address changes so there is no practical way to open up the wrappers for this situation. 'tperimeter' is a dynamic TCP wrapper control system that gives you (limited) remote control of your TCP wrapper configuration. It does this via a web interface that you've (hopefully) secured with https/SSL. You just log in, specify your current IP address and one of the services you want to access. 'tperimeter' will then briefly open a hole in your wrappers long enough to let you in. It then automatically closes the hole again. Voila! Remote access to your system, wherever you are. You get much of the facility of a VPN or so-called "port knocking" without most of the aggravation. As a side benefit, 'tperimeter' will also simplify management of your standard /etc/hosts.allow TCP wrapper control file. 'tperimeter' is written in python, shell script, and html. It is very small and easy to maintain. It was developed and tested on FreeBSD 4.x/8.x, and apache 1.x/2.x, but should run with very minor (or no) modification on most Unix-like systems like Linux or Mac OS X hosts. It comes complete with documentation in html, pdf, dvi, and Postscript formats. There is no licensing fee for any use, personal, commercial, government, or institutional. -- ---------------------------------------------------------------------------- Tim Daneliuk tundra@tundraware.com PGP Key: http://www.tundraware.com/PGP/