Nikolai Hlubek napisał(a):
On one of my machines I'm running a zope server. This server should only be accessible from my LAN so I set: hosts.deny ALL: ALL The hosts.deny manual states: This denies all service to all hosts, unless they are permitted access by entries in the allow file. Ping and ssh connects are refused but the web services provided by zope are still accessible from the outside. Is this a bug or am I missing something here?
You are missing the fact that only services which use hosts.deny (those served by inetd or those using libwrap (IIRC)) will be affected. In your case, you'll probably need to search somewhere else.