Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Apr 2002 23:30:38 -0500
From:      Justin Heath <jheath@theplanet.com>
To:        Peter Leftwich <Hostmaster@Video2Video.Com>
Cc:        FreeBSD LIST <FreeBSD-Questions@FreeBSD.Org>
Subject:   Re: OpenSSH and hosts.allow
Message-ID:  <5.1.0.14.2.20020430232925.024e3540@mail.theplanet.com>
In-Reply-To: <20020430153741.M10042-100000@earl-grey.cloud9.net>
References:  <5.1.0.14.2.20020428223215.02521ec0@mail.theplanet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Peter,

Thnaks. I didnt think to do a `host blah.blah.com`. That should work for 
now until I get everything figured out.

At 03:40 PM 4/30/2002 -0400, Peter Leftwich wrote:
>On Sun, 28 Apr 2002, Justin Heath wrote:
> > Peter, I am using SSHd version OpenSSH_2.9 (FreeBSD localisations 
> 20020307). As you can see this is not installed from the ports. I am 
> using /etc/hosts.allow. Which is where SSHd should be looking since it is 
> part of the base system and not a port. Thanks.
>
>Oops, duh, I'd forgotten about that file (/etc/hosts.allow)!  Honestly,
>thanks for the reminder - now I remember why sendmail isn't working
>properly (yet I can telnet port 25 of my box and deliver spoofed email).
>
>I would recommend you type `host my.domain.com` and use that IP in place of
>your "0.0.0.0: allow" example.
>
> > At 02:43 PM 4/28/2002 -0400, Peter Leftwich wrote:
> > >On Sun, 28 Apr 2002, Justin Heath wrote:
> > > > I am trying to set up sshd (OpenSSH) to use hosts.allow . The 
> problem is that the rules seem to work with IP address but not host names.
> > > > Example - Works: sshd: 0.0.0.0: allow
> > > > Does not work: sshd: .domain.com: allow (nor) sshd: my.domain.com: 
> allow
> > > > Any suggestions? Thanks. -Justin Heath
> > > Justin, Which version of OpenSSH (`sshd -v` this says illegal option, 
> but then gives you the version on the next line of stderr output) are you 
> using? What is the path to the hosts.allow file in your references?
> > Justin Heath
>
>Best of luck with it.  I've heard various versions of ssh(d) support
>hostnames, and others are strictly IP-based.
>
>--
>Peter Leftwich
>President & Founder
>Video2Video Services
>Box 13692, La Jolla, CA, 92039 USA
>+1-413-403-9555

Justin Heath


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20020430232925.024e3540>