SlackwareThis Forum is for the discussion of Slackware Linux.
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
I currently have my older Slackware 9.0 box setup to deny all SSHD traffic according to hosts.deny and allow only those who have been specified in hosts.allow. To my knowledge this functionality came right from the CD.
I am trying to set this up now on our 10.0 box, but it doesn't appear that it works that way anymore. I have compared the sshd_config files and even the rc.sshd startup files and can't find anything different that would suggest why I can't do this any more.
Does anyone know how to reactivate this functionality or do it better in 10.0? I checked out some of the hardening guides listed for various other problems but they all basically show how I'm doing in 9.0.
Any suggestions or help is greatly appreciated a head of time. Thanks.
I can't find any warning messages or other sshd related messages which are bad currently in secure or message. Everything is more or less "Accepted This and that."
When I put a new entry in hosts.deny it does apply to everything else but ssh. Like to test I have listed the IP of my OSX machine to deny all. From that point forward it can't connect to pop3 or FTP so I beleive the files themself are configured soundly. Unfortunately it can still connect through SSH.
I just dug out another one of my servers I've been waiting to bring back into service which also runs 10.0 and tested for the same issues. It works right so I'm guess it has to be something I have done. Since you pointed out the kernel, could it be possible I didn't compile something into my existing kernel for this to work properly?