From owner-freebsd-questions  Mon Jun 17  9:34:30 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from clink.schulte.org (clink.schulte.org [209.134.156.193])
	by hub.freebsd.org (Postfix) with ESMTP id 835DC37B410
	for <questions@FreeBSD.ORG>; Mon, 17 Jun 2002 09:34:26 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by clink.schulte.org (Postfix) with ESMTP
	id A347F243CF; Mon, 17 Jun 2002 11:34:24 -0500 (CDT)
Received: from schulte-laptop.nospam.schulte.org (nb-65.netbriefings.com [209.134.134.65])
	by clink.schulte.org (Postfix) with ESMTP
	id 6B62E243BE; Mon, 17 Jun 2002 11:34:22 -0500 (CDT)
Message-Id: <5.1.1.6.2.20020617113041.038e3d30@pop3s.schulte.org>
X-Sender:  (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 5.1.1
Date: Mon, 17 Jun 2002 11:31:54 -0500
To: =?iso-8859-1?Q?S=F8ren?= Neigaard <neigaard@e-box.dk>,
	questions@FreeBSD.ORG
From: Christopher Schulte <schulte+freebsd@nospam.schulte.org>
Subject: Re: How do I only permit some IP's to access FTP?
In-Reply-To: <273418715.20020617182351@e-box.dk>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: by AMaViS 0.3.12pre6 on clink.schulte.org
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Are your ftp rules above or below this, in /etc/hosts.allow:

---
# Start by allowing everything (this prevents the rest of the file
# from working, so remove it when you need protection).
# The rules here work on a "First match wins" basis.
ALL : ALL : allow
---

First match wins principle may be at work here.

At 06:23 PM 6/17/2002 +0200, S=F8ren Neigaard wrote:
>I have tried to alter my hosts.allow like this:
>
>ftpd : localhost : allow
>ftpd : MY_IP : allow
>ftpd : ALL : deny
>
>But still everybody can FTP to my box, what am I missing?
>
>--
>Med venlig hilsen/Best regards,
>  S=F8ren Neigaard mailto:neigaard@e-box.dk
>--
>  "Perfection is reached, not when there is no longer anything to add, but=
=20
> when there is no longer anything to take away. "

--
Christopher Schulte
http://www.schulte.org/
Do not un-munge my @nospam.schulte.org
email address.  This address is valid.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message