Billy Kim wrote:
>
> I thought ssh2 had it built in but last i remember, it didn't work.
>
> anyone know if this is built in?
>
> But it does seem to work with tcp-wrappers
>
> Look in the FAQ.
>
> 1.1:
> Q: How do I setup sshd2 to support tcp-wrappers?
>
> A: First, ./configure --with-libwrap and whatever flags you need. Make
> sure that configure finds your libwrap.a and tcpd.h files. Recompile.
>
> After this you can edit your /etc/hosts.allow and /etc/hosts.deny
> files. These "daemon" strings are in use by sshd2:
>
> sshd, sshd2 (The name sshd2 was called with (usually
> "sshd"))
> sshdfwd-X11 (if you want to allow/deny X11-forwarding)
> sshdfwd-<port-number> (for tcp-forwarding)
> sshdfwd-<port-name> (port-name defined in /etc/services. Used in
> tcp-forwarding.)
>
??????? tcp wrappers & hosts.deny != DenyGroup
I want to deny access to MEMBERS OF specified GROUP not to users making
connection from specified HOST !! But that doesn't seem to be build in ssh2
:(
Jacol.
P.S. I just don't know why that option hasn't been build in ssh2, is it
causing any particular security leak ????? why, oh why ??
------------------------------------------------------------------------------
Jacek Jedrzejczak e-mail: [EMAIL PROTECTED]
------------------------------------------------------------------------------
---==[ The only thing you can win in Marlboro's contest is cancer ]==---