> Hosts.deny works with inetd and tcpwrappers. Any service that is handled by
> inetd and passed to tcpwrappers can be configured by restrictions in
> hosts.deny.
> 
> I am not aware that any other processes use hosts.allow/hosts.deny, but if
> anyone else knows, please mention it.
> 
> You may also wish to look into adding portsentry (www.psionic.com) to your
> firewall arsenal. It will sit in the backgrounk listening to all the ports
> for innapropriate packet behaviour, and drop the offending IP into
> hosts.deny, as well as killing the route either with the route command, or
> ipchains if you add the line to do so.

openSSH (sshd) uses the hosts.allow and hosts.deny, even though it is run as
a daemon instead of using inetd. However it must be compiled with
'--tcp_wrappers', which I'm sure that Jean-Michel would have done for the
Mandrake RPM files.

Thanks... Dan.



Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.

Reply via email to