On Tue, 24 Oct 2000, Peter Jay Salzman wrote:

> question -- i'm looking at someone's system right now, and they have an
> /etc/hosts.deny:
> 
> ALL:  ALL
> ALL: 169.237.43.66
> ALL: 169.237.43.67
> ALL: 169.237.43.33
> ALL: 169.237.43.31
> ... etc ...
> 
> does this make sense?   doesn't the first line pretty much say it all?

It does.  The rest might be from portsentry....

> also - just so i have this clear, tcpd works in the following way:
> 
> 1. see if the host is allowed (allow).  if so, don't go to 2.
> 2. see if the host is denied (deny).  if so, don't go to 3.
> 3. allow access
> 
> is that right?

per "man 5 hosts_access", yes, that is right.


---------------------------------------------------------------------------
Jeff Newmiller                        The     .....       .....  Go Live...
DCN:<[EMAIL PROTECTED]>        Basics: ##.#.       ##.#.  Live Go...
Work:<[EMAIL PROTECTED]>              Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/Batteries            O.O#.       #.O#.  with
/Software/Embedded Controllers)               .OO#.       .OO#.  rocks...2k
---------------------------------------------------------------------------

Reply via email to