LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 03-08-2005, 06:03 PM   #1
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Rep: Reputation: 15
Slackware 10.0 and hosts.deny in reguards SSHD


Hello everyone.

I currently have my older Slackware 9.0 box setup to deny all SSHD traffic according to hosts.deny and allow only those who have been specified in hosts.allow. To my knowledge this functionality came right from the CD.

I am trying to set this up now on our 10.0 box, but it doesn't appear that it works that way anymore. I have compared the sshd_config files and even the rc.sshd startup files and can't find anything different that would suggest why I can't do this any more.

Does anyone know how to reactivate this functionality or do it better in 10.0? I checked out some of the hardening guides listed for various other problems but they all basically show how I'm doing in 9.0.

Any suggestions or help is greatly appreciated a head of time. Thanks.
-Smillie
 
Old 03-08-2005, 06:19 PM   #2
keefaz
Senior Member
 
Registered: Mar 2004
Distribution: Slackware
Posts: 4,437

Rep: Reputation: 93
Did you comment the auth line in /etc/inetd.conf, if yes try uncomment it and run
killall -HUP inetd

Any error in logs ? (/var/log/syslog...)
 
Old 03-08-2005, 07:30 PM   #3
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
Currently auth is uncommented in inetd.conf and I have nothing sshd related in my syslog except for this:

Mar 8 19:11:07 gator sshd[4487]: fatal: Timeout before authentication for 10.0.22.163.

Which I added LoginGraceTime as 15 so I think that is what the above is about.

-Smillie
 
Old 03-08-2005, 07:50 PM   #4
keefaz
Senior Member
 
Registered: Mar 2004
Distribution: Slackware
Posts: 4,437

Rep: Reputation: 93
Is it the sshd deamon that come with slackware 10.0 (openssh package 3.8.1pl) ?
 
Old 03-08-2005, 08:07 PM   #5
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
Yes.
-Smillie
 
Old 03-09-2005, 12:09 PM   #6
keefaz
Senior Member
 
Registered: Mar 2004
Distribution: Slackware
Posts: 4,437

Rep: Reputation: 93
No errors in /var/log/messages or /var/log/secure ?
As from these infos...
http://www.redhat.com/docs/manuals/l...rs-access.html
...any error in configs should be logged

There were issues with old version of udev and ssh though, do you run 2.6 kernel ?
 
Old 03-09-2005, 01:22 PM   #7
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
I am running 2.6.7 Kernel.

I can't find any warning messages or other sshd related messages which are bad currently in secure or message. Everything is more or less "Accepted This and that."

When I put a new entry in hosts.deny it does apply to everything else but ssh. Like to test I have listed the IP of my OSX machine to deny all. From that point forward it can't connect to pop3 or FTP so I beleive the files themself are configured soundly. Unfortunately it can still connect through SSH.
-Smillie
 
Old 03-09-2005, 04:42 PM   #8
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
I just dug out another one of my servers I've been waiting to bring back into service which also runs 10.0 and tested for the same issues. It works right so I'm guess it has to be something I have done. Since you pointed out the kernel, could it be possible I didn't compile something into my existing kernel for this to work properly?
-Smillie
 
Old 03-09-2005, 06:15 PM   #9
keefaz
Senior Member
 
Registered: Mar 2004
Distribution: Slackware
Posts: 4,437

Rep: Reputation: 93
No I mean it could be an udev thing as some reported ssh problems with one udev version
some time ago, maybe you should try upgrade udev to see
 
Old 03-09-2005, 08:37 PM   #10
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
Will try tomorrow and will post back. Again thanks for helping me through this.
-Smillie
 
Old 03-24-2005, 10:53 AM   #11
Smillie
LQ Newbie
 
Registered: Aug 2004
Location: Monroeville, PA
Distribution: Slackware
Posts: 22

Original Poster
Rep: Reputation: 15
OK I finally got everyone off the server (Spring Break has a lot to do with that) and I used swaret to update my server. Open-SSH was one of the updates and now all is well and working properly.

Again thanks for all the assistance above!:>
-Smillie
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
HowTo sshd deny all users except for one? mattengland Linux - Security 28 11-04-2007 02:53 PM
hosts.allow & hosts.deny question... jonc Linux - Security 9 03-05-2005 09:41 PM
Adding shell commands to hosts.deny and hosts.allow ridertech Linux - Security 3 12-29-2003 03:52 PM
hosts.deny help/how-to jon_k Linux - Software 1 07-25-2003 10:17 PM
hosts.deny and hosts.allow defaults? gui10 Linux - Security 5 12-20-2001 01:57 AM


All times are GMT -5. The time now is 05:08 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration