The following reply was made to PR config/1250; it has been noted by GNATS.
From: Dean Gaudet <[EMAIL PROTECTED]> To: Timothy J Luoma <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: config/1250: tcpd-wrapper support; use /etc/hosts.(allow|deny) Date: Tue, 21 Oct 1997 18:15:36 -0700 (PDT) On Tue, 21 Oct 1997, Timothy J Luoma wrote: > Author: Dean Gaudet <[EMAIL PROTECTED]> > Original-Date: Tue, 21 Oct 1997 16:54:12 -0700 (PDT) > Message-ID: > <[EMAIL PROTECTED]> > > > You don't need 1.3 to deny access to certain hosts, it just improves the > > facilities. Read the documentation for mod_access. > > I've read it.... > > Is that a per-directory basis, or can I setup for / and have it for the > entire site? Uh, you mustn't have read it closely. It says: Context: directory, .htaccess with each directive. There are also examples in conf/access.conf-dist which comes with apache. > Basically I want to allow connections only from IPs/domains I have > specifically said to allow. How do I separate them? Commas? Spaces? This, too, is covered in the documentation. Syntax: allow from host host ... > I believe that sshd has compile-time support for tcpd /etc/hosts(deny|allow) > > which would be nice as it would mean only having to maintain one database of > > allow/deny hosts. sshd doesn't have to handle 700 requests per second. Dean