Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Jan 2003 13:08:28 +0300
From:      Rayed Al-Rashed <rayed@saudi.net.sa>
To:        Vishal Gandhi Kommineni <vishal@southernonline.net>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: Sendmail ignoring hosts.allow
Message-ID:  <3E1BF89C.5020809@saudi.net.sa>
In-Reply-To: <007c01c2b6fb$35d51a00$0b6f3fca@southernonline.net>
References:  <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> <3E1BEAC8.4000500@saudi.net.sa> <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> <3E1BF1F2.4090205@saudi.net.sa> <007c01c2b6fb$35d51a00$0b6f3fca@southernonline.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--------/etc/hosts.allow--------

ALL : attack_ip : DENY
sendmail : attack_ip : DENY
smtp : attack_ip : DENY

sshd : our_ip : allow
sshd : ALL : deny

# allow everything else
ALL : ALL : allow
--------------------------------


Vishal Gandhi Kommineni wrote:

>Can you tell me what is in hosts.allow   ???
>
>Vishal Gandhi Kommineni
>----- Original Message -----
>From: "Rayed Al-Rashed" <rayed@saudi.net.sa>
>To: "Vishal Gandhi Kommineni" <vishal@southernonline.net>
>Cc: <freebsd-isp@FreeBSD.ORG>
>Sent: Wednesday, January 08, 2003 3:10 PM
>Subject: Re: Sendmail ignoring hosts.allow
>
>
>  
>
>>In /etc/hosts.deny I put
>>
>>  ALL : ALL
>>
>>and restarted sendmail and it still ignores it.
>>
>>I remembered one thing, I have 2 IPs one that server, does this have any
>>effect?!
>>Thanks
>>
>>- rayed
>>
>>Vishal Gandhi Kommineni wrote:
>>
>>    
>>
>>>in /etc/hosts.allow it should be
>>>ALL: xxx.xxx.xxx.xxx ( ip's you want to allow)
>>>
>>>in /etc/hosts.deny it should be
>>>
>>>ALL: ALL
>>>
>>>Vishal Gandhi Kommineni
>>>----- Original Message -----
>>>From: "Rayed Al-Rashed" <rayed@saudi.net.sa>
>>>To: "Vishal Gandhi Kommineni" <vishal@southernonline.net>
>>>Cc: <freebsd-isp@FreeBSD.ORG>
>>>Sent: Wednesday, January 08, 2003 2:39 PM
>>>Subject: Re: Sendmail ignoring hosts.allow
>>>
>>>
>>>
>>>
>>>      
>>>
>>>>Didn't work in both /etc/hosts.allow and /etc/hosts.deny
>>>>
>>>>
>>>>Vishal Gandhi Kommineni wrote:
>>>>
>>>>
>>>>
>>>>        
>>>>
>>>>>try
>>>>>ALL: ALL
>>>>>
>>>>>Vishal Gandhi Kommineni
>>>>>----- Original Message -----
>>>>>From: "Rayed Al-Rashed" <rayed@saudi.net.sa>
>>>>>To: <freebsd-isp@FreeBSD.ORG>
>>>>>Sent: Tuesday, January 07, 2003 3:14 PM
>>>>>Subject: Sendmail ignoring hosts.allow
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>          
>>>>>
>>>>>>Hi,
>>>>>>
>>>>>>Our mail server was under DOS attack, and I was trying to stop the new
>>>>>>connections using /etc/hosts.allow but I couldn't do it.
>>>>>>
>>>>>>The entry in /etc/hosts.allow:
>>>>>>
>>>>>>sendmail : xx.xx.xx.xx : DENY
>>>>>>
>>>>>>and I even tried:
>>>>>>
>>>>>>ALL : ALL : DENY
>>>>>>
>>>>>>but still doesn't work, I installed sendmail from the port, and I also
>>>>>>checked tcpwrapper support:
>>>>>>---------------------------------------------------
>>>>>># sendmail -d0.1
>>>>>>Version 8.12.1
>>>>>>Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7
>>>>>>               NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS
>>>>>>
>>>>>>
>>>>>>            
>>>>>>
>>>PIPELINING
>>>
>>>
>>>      
>>>
>>>>>>               SCANF TCPWRAPPERS USERDB XDEBUG
>>>>>>---------------------------------------------------
>>>>>>The /etc/mailer.conf also points to the port version.
>>>>>>Any ideas on why it doesn't work!!
>>>>>>
>>>>>>P.S. I just added an entry on /etc/mail/access to reject emails from
>>>>>>that IP but sendmail still need to fork.
>>>>>>
>>>>>>
>>>>>>Thanks,
>>>>>>- rayed
>>>>>>
>>>>>>
>>>>>>To Unsubscribe: send mail to majordomo@FreeBSD.org
>>>>>>with "unsubscribe freebsd-isp" in the body of the message
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>            
>>>>>>
>>>>>
>>>>>          
>>>>>
>>>>        
>>>>
>>>
>>>
>>>      
>>>
>>    
>>
>
>
>  
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E1BF89C.5020809>