[Linux-disciples] Entry in hosts.deny not blocked

Stephen R Laniel steve at laniels.org
Tue Dec 7 22:41:47 EST 2004


I put an IP address in /etc/hosts.deny, and it doesn't get
blocked. The line reads

ALL: 140.247.60.120

which is the IP address of our beloved bostoncoop.net. If I
ssh to bostoncoop.net, then try to ssh back to laniels.org,
I get through fine; I shouldn't be able to, unless I
misunderstand things.

I don't quite get the interaction between inetd, tcpd, and
those daemons that don't run under inetd (including ssh, I
gather). In any case, I thought it would Just Work: you
include a host to deny in /etc/hosts.deny and it's denied.
Is this not so?

-- 
``A mysterious voice on the sound track advises David to
  escape. He is supplied with a bar of soap, half a loaf
  of bread, a compass, and an envelope not to be opened
  until he gets to Denmark or finds Carmen Sandiego,
  whichever comes first. Sorry about that.''
 -Roger Ebert, http://shorl.com/dykipydrasana



More information about the Linux-disciples mailing list