The following reply was made to PR config/1250; it has been noted by GNATS.
From: Dean Gaudet <[EMAIL PROTECTED]>
To: Timothy J Luoma <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: config/1250: tcpd-wrapper support; use /etc/hosts.(allow|deny)
Date: Tue, 21 Oct 1997 18:15:36 -0700 (PDT)
On Tue, 21 Oct 1997, Timothy J Luoma wrote:
> Author: Dean Gaudet <[EMAIL PROTECTED]>
> Original-Date: Tue, 21 Oct 1997 16:54:12 -0700 (PDT)
> Message-ID:
> <[EMAIL PROTECTED]>
>
> > You don't need 1.3 to deny access to certain hosts, it just improves the
> > facilities. Read the documentation for mod_access.
>
> I've read it....
>
> Is that a per-directory basis, or can I setup for / and have it for the
> entire site?
Uh, you mustn't have read it closely. It says:
Context: directory, .htaccess
with each directive.
There are also examples in conf/access.conf-dist which comes with apache.
> Basically I want to allow connections only from IPs/domains I have
> specifically said to allow. How do I separate them? Commas? Spaces?
This, too, is covered in the documentation.
Syntax: allow from host host ...
> I believe that sshd has compile-time support for tcpd /etc/hosts(deny|allow)
>
> which would be nice as it would mean only having to maintain one database of
>
> allow/deny hosts.
sshd doesn't have to handle 700 requests per second.
Dean