Re: hosts.allow - words of wisdom?

[Alexander Kushnirenko <kushnir@pccmu1.fnal.gov>]

Hi, Carey!
Thanks for your detailed answers,

[snip]
> DNS names and DNS servers being down, so, for example, I have a line:
> ALL : 127.0.0.1 192.168.117. : ALLOW
Good point,  I switched to them.

[snip]
> I'm actually using the IP firewall code in Linux 2.2.0-pre5 to provide 
> most of the protection to my system.  My ipchains rules are as follows 
> (actually saved in /etc/ipchains.save and read by ipchains-restore in 
> /etc/init.d/network).
Interesting, that's quite a new thought to me.  I'm not a security expert at 
all of course.  Do you have any web references or other relevant documents 
telling pro and cons of this technique, as opposed to TCP wrapper?

[snip]
Thanks,
Sasha.