From owner-freebsd-questions Mon Mar 25 22:40:49 2002 Delivered-To: freebsd-questions@freebsd.org Received: from russian-caravan.cloud9.net (russian-caravan.cloud9.net [168.100.1.4]) by hub.freebsd.org (Postfix) with ESMTP id 9360437B4A7 for ; Mon, 25 Mar 2002 22:40:32 -0800 (PST) Received: from earl-grey.cloud9.net (earl-grey.cloud9.net [168.100.1.1]) by russian-caravan.cloud9.net (Postfix) with ESMTP id 63E5D28BE5; Tue, 26 Mar 2002 01:40:25 -0500 (EST) Date: Tue, 26 Mar 2002 01:40:25 -0500 (EST) From: Peter Leftwich X-X-Sender: To: Paul Everlund Cc: FreeBSD Questions Subject: Re: hosts.allow in dmesg [www2.tidenet.com] In-Reply-To: <3C9E535D.F5A5B3B5@cs.umu.se> Message-ID: <20020326013735.A8453-100000@earl-grey.cloud9.net> Organization: Video2Video Services - http://Www.Video2Video.Com MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, 24 Mar 2002, Paul Everlund wrote: > Thanks for your answer! The first match in my hosts.allow is ALL-ALL-allow. And if www2.tidenet.com does not exist, why do I even get this message? Hi again, Paul. Where is the error message about www2.tidenet.com generated, i.e. when and by what program or startup file? > Do anyone know what triggers it? Someone here previously wrote that using inetd with -w -W (TCP-wrappers) uses the hosts.allow-file. Do this mean that someone are trying to connect through an inetd active service, and when a host lookup can not be done this message is triggered? > Best regards, > Paul You are correct, and inetd -wW is the most common (minimum) flag usage. If you are concerned about reverse lookups or spoofed hostnames, then put this line *before* your ALL-ALL: all or whatever line :) # grep PARANOID /etc/hosts.allow ALL : PARANOID : RFC931 20 : deny -- Peter Leftwich President & Founder Video2Video Services Box 13692, La Jolla, CA, 92039 USA +1-413-403-9555 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message