Hmm.  Found docs on tcpd wrapper.  Says it reads hosts.allow followed by
hosts.deny and stops when it finds a match.  Tried to put:

80: 0.0.0.0/0.0.0.0
22: 0.0.0.0/0.0.0.0

but that didn't do any good.

Should it be www: and ssh: or sh-http: and sshd:???

Keith
P.S. see related email about dhclient and weblet.  Could be related???

> -----Original Message-----
> From: Charles Steinkuehler [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 25, 2002 2:32 PM
> To: Keith Laidlaw; LEAF
> Subject: Re: [Leaf-user] Open ssh and weblet to my VPN
>
>
> > I have set up leaf as a freeswan SG with an internet connection on one
> side
> > and 192.168.1.0/24 (w2k) on the other.  I've used weblet to monitor the
> > system and ssh to administer it, but both only from 192.168.1.0/24
> >
> > Currently with the vpn I can ping 192.168.1.254 (the internal
> ip of leaf)
> > but I can't connect to http://192.168.1.254.  Similarly, I think ssh
> doesn't
> > work from outside.  How do I SAFELY open up these two to monitor and
> > administer from outside via the vpn?
>
> You probably just need to edit /etc/hosts.allow, and list your remote VPN
> network for the services you want to run...
>
> Charles Steinkuehler
> http://lrp.steinkuehler.net
> http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)
>
>
>



_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to