Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Jun 2005 18:07:48 +0200
From:      Vladimir Dvorak <dvorakv@vdsoft.org>
To:        Osmany Guirola Cruz <osmany.guirola@cigb.edu.cu>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: wrap sshd
Message-ID:  <42AB0C54.4030505@vdsoft.org>
In-Reply-To: <1118424653.87529.5.camel@draco.cigb.edu.cu>
References:  <1118424653.87529.5.camel@draco.cigb.edu.cu>

next in thread | previous in thread | raw e-mail | index | archive | help
Osmany Guirola Cruz wrote:

>Hi
> i am trying to restrict the ssh access to my machine from a specific
>machine and i am using hosts.allow but does not wor for me this is
>my /etc/hosts.allow file
>
>
>sshd : capella.cigb.edu.cu : deny
>
>then i restart the sshd daemon and doe not work i still have access from
>this machine ...
>
>Thanks
>  
>
You have better to deny everything and allow several certain hosts or networks. It is much more secure schema, than have tone of records of bad guy`s hosts in your tcp-wrappers config file.

But I admit, that in some cases sense of your question is relevant. But I am not sure in which cases ? :-)

Vladimir Dvorak




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42AB0C54.4030505>