** Reply to message from Antony Stone <[EMAIL PROTECTED]> on Mon, 08 Jul 
2002 00:04:34 +0100


> On Sunday 07 July 2002 11:54 pm, Dennis Cardinale wrote:
> 
> > When running a netfilter firewall, is there any reason to continue using
> > the hosts.deny and hosts.allow files, or is this just superfluous?
> 
> hosts.allow can still be useful to specify a command to run when a connection 
> comes in (eg to provide some special logging ?), but these files don't add 
> any security to a decently configured netfilter setup.

Beg to differ. /etc/hosts.deny allows access tuning of services that are set wide open 
on the firewall, ssh being a prime example.

jb

-- 
Jack Bowling
mailto: [EMAIL PROTECTED]

Reply via email to