Re: hosts.allow/hosts.deny question (2)
On Mon, Aug 07, 2000 at 09:51:50AM -0400, Noah L. Meyerhans wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
>
> These are by no means irrelevant to sshd, even if it is not run from
> inetd. Read the man page for sshd, in which you'll see that it can be
> build with direct support for tcp_wrappers. If it is (I don't know what
> the configure options in the Debian build are, but I suspect it is), then
> 'sshd: ALL' or whatever should work in /etc/hosts.allow and .deny.
>
> OTOH, Lindsay should also check for AllowHosts or DenyHosts in
> /etc/ssh/sshd_config...man sshd for more info.
Indeed, I stand corrected. Looks like Debian packages are compiled with
tcpwrappers (libwrap). "Bad Cop. No Donut!"
Reply to: