From owner-freebsd-questions@FreeBSD.ORG  Fri Jun 10 22:15:56 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 169D716A41C
	for <freebsd-questions@freebsd.org>;
	Fri, 10 Jun 2005 22:15:56 +0000 (GMT)
	(envelope-from mrg8n@d-137-145-172.bootp.virginia.edu)
Received: from d-137-145-172.bootp.virginia.edu
	(d-137-145-172.bootp.Virginia.EDU [137.54.145.172])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CAA6C43D53
	for <freebsd-questions@freebsd.org>;
	Fri, 10 Jun 2005 22:15:55 +0000 (GMT)
	(envelope-from mrg8n@d-137-145-172.bootp.virginia.edu)
Received: by d-137-145-172.bootp.virginia.edu (Postfix, from userid 501)
	id D10392C691B; Fri, 10 Jun 2005 18:15:53 -0400 (EDT)
Date: Fri, 10 Jun 2005 18:15:53 -0400
From: Mike Galvez <galvez@virginia.edu>
To: Osmany Guirola Cruz <osmany.guirola@cigb.edu.cu>
Message-ID: <20050610221553.GB515@d-137-145-172.bootp.virginia.edu>
References: <1118424653.87529.5.camel@draco.cigb.edu.cu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1118424653.87529.5.camel@draco.cigb.edu.cu>
User-Agent: Mutt/1.4.2i
X-Operating-System: Darwin UNIX
Cc: freebsd-questions@freebsd.org
Subject: Re: wrap sshd
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Jun 2005 22:15:56 -0000

On Fri, Jun 10, 2005 at 05:30:53PM +0000, Osmany Guirola Cruz wrote:
> Hi
>  i am trying to restrict the ssh access to my machine from a specific
> machine and i am using hosts.allow but does not wor for me this is
> my /etc/hosts.allow file
> 
> 
> sshd : capella.cigb.edu.cu : deny

make sure you comment out the line below in your host.allow file or none
of your rules will work.

# Start by allowing everything (this prevents the rest of the file
# from working, so remove it when you need protection).
# The rules here work on a "First match wins" basis.
#ALL : ALL : allow <------------- 


> 
> then i restart the sshd daemon and doe not work i still have access from
> this machine ...

There is no need to restart the sshd daemon for TCP-wrappers to work.

> 
> Thanks
> 
> Osmany
> 
> 
> 
> 
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

-- 
Michael Galvez             http://www.people.virginia.edu/~mrg8n
Information Technology Specialist         University of Virginia
Manager Comptroller Systems Support         Office: 434-982-2975 
USENIX Member

Going to church does not make a person religious, nor does going to
school make a person educated, any more than going to a garage makes a
person a car.