Re: sshd and /etc/hosts.deny

[John Corey <john@jcorey.org>]

Charles Menzes wrote:
> 
> I found out today by accident that it appears that the rpm for openssh
> 1.2.3 has support for tcpwrapper built in, since when I add an all : all
> to my /etc/hosts.deny, the server drops any attempt at an ssh connection.
> does anyone know of the daemon name to use within hosts.deny to specify
> allowed connections for ssh?

It should be the executable name.  That's the "standard" way to do
tcp_wrappers.  Of course, I have seen some things that don't.  I believe
if you look in the log message that has the denied connection attempt,
it will have the expected daemon name at the beginning, with pid number.

--
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.