Re: SSH attack

[Alvin Oga <aoga@mail.Linux-Consulting.com>]

On Mon, 3 Oct 2005, Pollywog wrote:

> Do you know for sure that /etc/hosts.deny has anything to do with ssh?
> I thought /etc/hosts.deny would only work with services that run from inetd or 
> xinetd, not with daemons.

ssh is typically built with tcpwrappers .. and ez enough to do so
if its not already built in

you will not notice it ( ssh w/ wrappers ) if you do NOT turn things off
with

    /etc/hosts.deny
	ALL: ALL

in which case oyu will than need to turn on things explicitly for what you
want
    /etc/hosts.allow

	ssh: 1.2.3.4(ro)

	nfs-stuff: 1.2.3.4(ro,sync)

c ya
alvin