LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-24-2008, 04:43 AM   #1
tnjones
LQ Newbie
 
Registered: Aug 2008
Posts: 27

Rep: Reputation: 15
Info on /etc/hosts.deny file


Hello,
Currently, I am taking a Computer and Network Security course and have a question om my HW that asks for the six entries on the ENS /etc/hosts.deny file. We need to specifically address what each listed service does and what the system implications are for the entry in the /etc/hosts.deny file. At this time I have researched info on the file but am not finding such info. regarding to the entries. If anyone can direct me in the right direction for this info, I will greatly appreciate it.

Thanks in Advance
 
Old 09-24-2008, 06:55 AM   #2
marozsas
Senior Member
 
Registered: Dec 2005
Location: Campinas/SP - Brazil
Distribution: SuSE, RHEL, Fedora, Ubuntu
Posts: 1,499
Blog Entries: 2

Rep: Reputation: 68
The files /etc/hosts.allow and /etc/hosts.deny are used by a library named libwrap.so from the package tcp-wrappers (tcp_wrappers-libs-7.6-52.fc9.i386 in F9) and any "server" linked with it.
Common "servers" are sshd, rsyncd, cupsd, etc.
To check if a given server has support to tcpwrapper, check if it was linked to libwrap (ldd /usr/sbin/sshd | grep libwrap). If it is, than you can control its access using /etc/hosts.allow and /etc/hosts.deny files.
Think hosts.allow and hosts.deny as an access control on the application level, a kind of firewall for specific applications, not protocol/port as usual.
 
Old 09-24-2008, 02:49 PM   #3
jonty_11
Member
 
Registered: Sep 2004
Posts: 127

Rep: Reputation: 15
Quote:
Originally Posted by marozsas View Post
The files /etc/hosts.allow and /etc/hosts.deny are used by a library named libwrap.so from the package tcp-wrappers (tcp_wrappers-libs-7.6-52.fc9.i386 in F9) and any "server" linked with it.
Common "servers" are sshd, rsyncd, cupsd, etc.
To check if a given server has support to tcpwrapper, check if it was linked to libwrap (ldd /usr/sbin/sshd | grep libwrap). If it is, than you can control its access using /etc/hosts.allow and /etc/hosts.deny files.
Think hosts.allow and hosts.deny as an access control on the application level, a kind of firewall for specific applications, not protocol/port as usual.
Once we modify host.deny, do we have to restarrt any service to make it effective?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
can't restrict sshd access through hosts.allow and hosts.deny but was working earlier farhan Linux - Security 4 04-18-2008 07:41 AM
Need a little advice on the hosts.deny file binarybob0001 Linux - Networking 0 11-05-2007 10:22 AM
/etc/hosts.deny/hosts.allow have no effect on sshd access bganesh Linux - Security 4 05-04-2006 08:06 PM
Entries in hosts.deny file tensigh Linux - Security 8 05-02-2006 04:52 PM
SSH hosts.deny file WoodyH Linux - Security 1 10-11-2003 07:44 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:23 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration