Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Nov 1995 03:22:22 +0000
From:      Gary Palmer <gary@palmer.demon.co.uk>
To:        Basket Case <jon@technix.org>
Cc:        Freebsd Questions <freebsd-questions@freebsd.org>
Subject:   Re: /etc/hosts.deny not working & PCVT Problems when returning from remote sites 
Message-ID:  <10065.815800942@palmer.demon.co.uk>
In-Reply-To: Your message of "Mon, 06 Nov 1995 21:53:11 EST." <Pine.BSF.3.91.951106214603.11646A-100000@technix.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
Basket Case wrote in message ID
<Pine.BSF.3.91.951106214603.11646A-100000@technix.org>:
> I'm trying to block out a site from accessing my system at all and for 
> some odd reason I can't seem to get /etc/hosts.deny to work as I still get
> connections from the site.  For instance if I want to block out all 
> connections coming from abc.com -- the contents of /etc/hosts.deny is:
 
> ALL: .abc.com
 
> But oddly, that doesnt work.  I tried -HUPing all processes (daemons) but
> i still get connections from anyone coming in from .abc.com -- what do I 
> do to make sure that no one from a specific host is allowed to connect to 
> the system?

It's not odd at all. The standard system daemons don't use
/etc/hosts.allow and /etc/hosts.deny, the tcp wrapper package does,
however. See ports/net/tcp_wrapper.

Alternatively, you could compile ipfw into your kernel and use it as a
packet filter to block out accesses from that domain.

Gary




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?10065.815800942>