Re: hosts.deny

[listrcv <listrcv@condor-werke.com>]

Jack Hale wrote:
> I am trying to block a whole subnet. (example 
> 100.100.100.0-100.100.100.255).
> in my /etc/hosts.deny file I have placed this as 
> 100.100.100.0/100.100.100.255.
> Is this the correct way to do this? I am using Shorewall for the 
> firewall. I am new to this. Sorry for the stupidity.

Check out man hosts.deny. Since you mention using a firewall, it 
probably doesn't do what you want.

You likely will have to define appropriate rules in your firewall to 
drop or to reject all packets originating from and going to that 
particular subnet.


GH