From owner-freebsd-questions@FreeBSD.ORG Sun Mar 19 15:32:35 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F1C4416A400 for ; Sun, 19 Mar 2006 15:32:35 +0000 (UTC) (envelope-from gerard@seibercom.net) Received: from smtp4.suscom.net (smtp4.suscom.net [64.78.119.247]) by mx1.FreeBSD.org (Postfix) with ESMTP id 526D343D45 for ; Sun, 19 Mar 2006 15:32:35 +0000 (GMT) (envelope-from gerard@seibercom.net) Received: from localhost (unknown [127.0.0.1]) by smtp4.suscom.net (Postfix) with ESMTP id 502AA150074 for ; Sun, 19 Mar 2006 10:32:33 -0500 (EST) Received: from smtp4.suscom.net ([127.0.0.1]) by localhost (smtp4.suscom.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 01434-01-5 for ; Sun, 19 Mar 2006 10:32:22 -0500 (EST) Received: from seibercom.net (ip148.217.45.216.suscom.net [216.45.217.148]) by smtp4.suscom.net (Postfix) with SMTP id A5E7415005E for ; Sun, 19 Mar 2006 10:32:22 -0500 (EST) Received: from seibercom.net (localhost [127.0.0.1]) by seibercom.net (8.13.4/8.13.4) with ESMTP id k2JFWNm1038266 for ; Sun, 19 Mar 2006 10:32:23 -0500 (EST) (envelope-from gerard@seibercom.net) Received: from localhost (localhost [[UNIX: localhost]]) by seibercom.net (8.13.4/8.13.4/Submit) id k2JFWLE8038265 for freebsd-questions@freebsd.org; Sun, 19 Mar 2006 10:32:21 -0500 (EST) (envelope-from gerard@seibercom.net) From: Gerard Seibert Organization: Seibercom,net To: freebsd-questions@freebsd.org Date: Sun, 19 Mar 2006 10:32:20 -0500 User-Agent: KMail/1.9.1 References: <441CA1F9.20301@chrismaness.com> <5ceb5d550603190128q5f3e46c3o84e4b45236df0883@mail.gmail.com> <441D71FE.2070003@chrismaness.com> In-Reply-To: <441D71FE.2070003@chrismaness.com> X-Face: "\j?x](l|]4p?-1Bf@!wN<&p=$.}^k-HgL}cJKbQZ3r#Ar]\%U(#6}'?<3s7%(%(=?utf-8?q?gxJxxc=0A=09RnSNPNr*/=5E=7EStawWU9KDJ-CT0k=24f=23?=@t2^K&BS_f|?ZV/.7Q MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3654328.GjrC4HtVEj"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200603191032.21530.gerard@seibercom.net> X-Virus-Scanned: ClamAV 0.88/1340/Sun Mar 19 09:19:37 2006 on seibercom.net X-Virus-Status: Clean X-Virus-Scanned: amavisd-new at suscom.net Subject: Re: hosts.allow ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: gerard@seibercom.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Mar 2006 15:32:36 -0000 --nextPart3654328.GjrC4HtVEj Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Chris Maness wrote: > Daniel A. wrote: > > On 3/19/06, Chris Maness wrote: > >> My denyhost script is doing it's job by adding: > >> > >> sshd: 62.149.232.105 : deny > >> > >> to the hosts.allow file, but I see that this host is still making > >> attempts to get into my box. Is there a cron job or something > >> that has to re-read the hosts.allow file before it the IP will be > >> blocked? _______________________________________________ > >> freebsd-questions@freebsd.org mailing list > >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions > >> To unsubscribe, send any mail to > >> "freebsd-questions-unsubscribe@freebsd.org" > > > > Offtopic, but > > How did you set up denyhosts? Daemon? Cron? > > p.s. > > OK, I was able to get to work by just starting out with a blank > hosts.allow. Everything is allowed by default, so when denyhosts > adds a deny line to the file, it will deny access to that host. > > Also, sshd can't be started in rc.conf, it has to be started in > inetd.conf. Make sure you do a /etc/rc.d/inetd restart after you > make changes. Just out of curiosity, why can 'sshd' not be started from the=20 '/etc/rc.conf' file? =2D-=20 Gerard Seibert gerard@seibercom.net PGP: http://www.seibercom.net/sig/gerard.asc --nextPart3654328.GjrC4HtVEj Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.1 (FreeBSD) iD8DBQBEHXmFchM2dIO+3uMRAhLqAJ4yUlAdv8F4iOR6XroOBGA1gfmx2wCghmaI JA15rhv79wmvbeNUMHdZzXY= =irtd -----END PGP SIGNATURE----- --nextPart3654328.GjrC4HtVEj--