4.X Sensors - hosts.allow Problems

[emusican]

Using VMS2.2 Solaris 8

Im having an ongoing problem where the only IP that is being permitted to connect to the sensor is the one at the top of the access list (which automatically places it at the head of the line in the hosts.allow).

I have experimented with changing the order of the list via the cisco username interface.

So what Im stuck with basically is only being able to access the sensor through the console, which I leave at the top of the list. I need to be able to use the IDM tool from other workstations, but right now all I can do is use the console.

Any help would be appreciated

Eric

[jlively]

Can you log in as service, su - root (same pw as service account) and check file permissions on the /etc/hosts.allow file. Can you cat the file and send me the output jlively@cisco.com..

Jim

[jamesand]

You should also check the file permissions on the /usr/cids/idsRoot/shared/host.conf file. This file should be owned by cids with owner/group write enabled. There was a bug where this file was changed to be owned by root. If this is the case, then:

> su

# cd /usr/cids/idsRoot/shared

# chown cids:cids host.conf

# chmod 664 host.conf

[emusican]

This fixed the problem, thanks!