/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
hosts.deny (and hosts.allow) are used by the tcpwrappers
daemon 'tcpd'. Only daemons which are started using tcpd
via the master daemon inetd will be subjected to this
restriction. Typically sshd is not started in this way.
'man tcpd' for further details on tcpwrappers.
Look at /etc/inetd.conf to see which daemons are using
tcpwrappers.
Hope this helps,
Morgan
> -----Original Message-----
> From: Me You [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 10, 1999 17:57
> To: [EMAIL PROTECTED]
> Subject: [Masq] host.deny
>
>
> /* HINT: Search archives @ http://www.indyramp.com/masq/
> before posting! */
>
>
> I am using a linux computer with IP Masq to act as a
> firewall for my other computers. After looking
> through many papers on system security it was
> suggested that if you want to close the box tight, you
> should enter ALL:ALL in the /etc/host.deny file to
> deny all host. Does the work only for telnet, ftp,
> etc?? and not SSH??? I have entered ALL:ALL on a line
> as suggested, but am still able to SSH into my box.
>
> Thanks in advance.
> __________________________________________________
> Do You Yahoo!?
> Thousands of Stores. Millions of Products. All in one place.
> Yahoo! Shopping: http://shopping.yahoo.com
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at
http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
