/etc/hosts.allow question

GUIPenguin · 05-23-2005, 01:11 PM

If I add to /etc/hosts.allow

Code:

 sshd: 254.254.

would that work to block sshd to everything but 254.254.xxx.xxx ?
I am not going to be using iptables for a specific reason

because I already see the lines

Code:

bootpd: 0.0.0.0
tftpd:    192.168.

This is fedora core 3 with ltsp

BrianK · 05-23-2005, 01:55 PM

While I believe that does work, I know this to work:

Code:

portmap:192.168.0.0/255.255.255.0

(giving an ip & mask).

you can also give an ip/mask & it will mask just like the above, i.e. 192.168.0.0/32

there are other options as well.

there are man pages on hosts.allow & hosts.deny (man hosts.allow) - give 'em a look.

twantrd · 05-23-2005, 07:01 PM

Quote:

would that work to block sshd to everything but 254.254.xxx.xxx

First thing I would do is look up hosts.[deny|allow] in google. However, I believe that hosts.allow takes precedence over hosts.deny. So this *should* work:

hosts.allow:
sshd: <your ip/your netmask>

hosts.deny:
sshd: all

That should block all incoming ssh connections and allow only the ip address.

-twantrd

Tinkster · 05-23-2005, 08:51 PM

The actual man-page is
man 5 hosts_access

And both notations (on top of a few others ;}) are
equally acceptable!

Cheers,
Tink