Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Sep 1999 10:10:18 +0200
From:      Sheldon Hearn <sheldonh@uunet.co.za>
To:        Aaron Brandt <abrandt@globalcenter.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Tcp Wrappers 
Message-ID:  <33090.937901418@axl.noc.iafrica.com>
In-Reply-To: Your message of "Mon, 20 Sep 1999 18:35:10 MST." <Pine.BSI.3.96.990920183047.15662A-100000@usr07.primenet.com> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Mon, 20 Sep 1999 18:35:10 MST, Aaron Brandt wrote:

>  I am running 3.2 release, I have installed tcp wrappers and I cannot
> for the life of me get it to work correctly.

Uninstall TCP Wrappers. It's already in the base system.

Grab the latest SSH port, which knows how to link against the TCP
Wrappers in the base system.

The TCP Wrappers in the base system use /etc/hosts.allow, not
/usr/local/etc/hosts.allow.

> sshd : domain : allow
> sshd : domain@ : deny

What's that? Have a look at the patterns section of the hosts_access(5)
manpage:

	man 5 hosts_access

You'll see that you can't specify some.domain.com, nor somedomain.com@
as legal patterns.

If you can tell us what you want, we can help you fabricate some rules,
but I'm pretty sure that you'll get it right once you've checked out
that section of the manpage.

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?33090.937901418>