Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-26 Thread Marcos Pinto
hosts.allow has ALL: * I want everyone to have access except for those in hosts.deny. Is that not the proper way? On 1/25/06, Greg Norris [EMAIL PROTECTED] wrote: I have a sarge box (fully updated as of 2 days ago) running the same version of ssh, and it honours the /etc/hosts.deny settings.

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-26 Thread Greg Norris
On Thu, Jan 26, 2006 at 02:56:24PM -0600, Marcos Pinto wrote: hosts.allow has ALL: * I want everyone to have access except for those in hosts.deny. Is that not the proper way? The settings in hosts.allow have precedence over hosts.deny, so this entry is overriding your denial rules. Since

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-26 Thread Greg Norris
On Thu, Jan 26, 2006 at 04:44:19PM -0600, Greg Norris wrote: This is documented in the hosts_access manpage. More specifically, that should be hosts_access(5)... I hadn't noticed that there are multiple manpages. signature.asc Description: Digital signature

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-25 Thread Marcos Pinto
Package: ssh Severity: serious Justification: unkown i have various machines listed in /etc/hosts.deny in this format: ALL: x.x.x.x where x.x.x.x = ip however, sshd still allows those ips to login, when it should not. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel:

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-25 Thread Justin Pryzby
On Wed, Jan 25, 2006 at 08:13:40PM -0500, Marcos Pinto wrote: Package: ssh Severity: serious Justification: unkown i have various machines listed in /etc/hosts.deny in this format: ALL: x.x.x.x where x.x.x.x = ip however, sshd still allows those ips to login, when it should not. With what

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-25 Thread Marcos Pinto
3.8.1p1-8.sarge.4 running on a fully updated sarge box On 1/25/06, Justin Pryzby [EMAIL PROTECTED] wrote: On Wed, Jan 25, 2006 at 08:13:40PM -0500, Marcos Pinto wrote: Package: ssh Severity: serious Justification: unkown i have various machines listed in /etc/hosts.deny in this format:

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-25 Thread Justin Pryzby
On Wed, Jan 25, 2006 at 08:01:31PM -0600, Marcos Pinto wrote: 3.8.1p1-8.sarge.4 running on a fully updated sarge box Anything in hosts.allow? You might try to compile the versions of libwrap0 and ssh from testing, and see if that helps. -- Clear skies, Justin On 1/25/06, Justin Pryzby [EMAIL

Bug#349940: ssh: does not obey /etc/hosts.deny

2006-01-25 Thread Greg Norris
I have a sarge box (fully updated as of 2 days ago) running the same version of ssh, and it honours the /etc/hosts.deny settings. Do you have any entries in /etc/hosts.allow? signature.asc Description: Digital signature