Hello Jason,

Thank you for your post.

I was unaware that OpenSSH was dropping support for tcpwrappers.

Now I need to go and read up on this.

Do you know, is this a firm thing?  Or just a possible plan?  I wonder if there 
is anything we can do as end users to help reverse this decision.

Jerry


On 04/26/14 11:08 AM, Jason L Tibbitts III wrote:
> So, with OpenSSH deciding to drop tcpwrappers support, there doesn't
> appear to be too much future for denyhosts unless someone does the work
> to make it either generate firewall rules or generate whatever sshd
> configuration is needed to make use of its internal host matching
> logic.  (Though the latter really isn't preferable since it will reject
> the connection much later in the negotiation process.)
>
> Doing the firewall thing basically leaves denyhosts in the same boat as
> fail2ban, except that fail2ban does more than ssh, supports the systemd
> journal on Linux distros that use it, and seems to be actively
> developed.
>
> Due to this I will probably drop denyhosts from Fedora.  I haven't been
> the best maintainer in any case but there is no point in keeping the
> software around if it doesn't do much of anything.
>
>   - J<
>

------------------------------------------------------------------------------
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet with eXo Platform Software
Java Based Open Source Intranet - Social, Extensible, Cloud Ready
Get Started Now And Turn Your Intranet Into A Collaboration Platform
http://p.sf.net/sfu/ExoPlatform
_______________________________________________
Denyhosts-user mailing list
Denyhosts-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to