From owner-freebsd-security Sun Mar 26 23:41:17 2000 Delivered-To: freebsd-security@freebsd.org Received: from axl.ops.uunet.co.za (axl.ops.uunet.co.za [196.31.1.175]) by hub.freebsd.org (Postfix) with ESMTP id 7E3DC37BBC3 for ; Sun, 26 Mar 2000 23:40:59 -0800 (PST) (envelope-from sheldonh@axl.ops.uunet.co.za) Received: from sheldonh (helo=axl.ops.uunet.co.za) by axl.ops.uunet.co.za with local-esmtp (Exim 3.13 #1) id 12ZU86-000BlL-00; Mon, 27 Mar 2000 09:40:06 +0200 From: Sheldon Hearn To: Brad Guillory Cc: Michael DeMutis , freebsd-security@FreeBSD.ORG Subject: Re: Deny based on IP - TCP Wrapper In-reply-to: Your message of "Fri, 24 Mar 2000 16:17:44 CST." <20000324161743.M53604@baileylink.net> Date: Mon, 27 Mar 2000 09:40:05 +0200 Message-ID: <45218.954142805@axl.ops.uunet.co.za> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 24 Mar 2000 16:17:44 CST, Brad Guillory wrote: > You should look in man under hosts_options(5) and the files > /etc/hosts.allow. > > The /etc/hosts.deny file is no longer used so if someone point you there > just ignore them ;-). Are you sure it's not used? Are you just saying that because of the comment you read in /etc/hosts.allow or have you checked that hosts.deny isn't read? The last time I checked, hosts_access(3) _did_ use rules from /etc/hosts.deny. This leads me to suspect that the comment in /etc/hosts.allow is just a usage convention. Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message