LinuxQuestions.org - [DEBIAN SARGE] problems setting up sshd to use tcpwrapper

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - [DEBIAN SARGE] problems setting up sshd to use tcpwrapper (https://www.linuxquestions.org/questions/linux-security-4/%5Bdebian-sarge%5D-problems-setting-up-sshd-to-use-tcpwrapper-353960/)

[DEBIAN SARGE] problems setting up sshd to use tcpwrapper

Im trying to setup the python script denyhosts but my sshd currently ignores the files host.deny and hosts.allow. So it seems I need to run it trough a tcpwrapper.

I changed the ssh startup script so it starts sshd like this:

Code:

start-stop-daemon --start --quiet --pidfile /var/run/sshd.pid --exec /usr/sbin/tcpd /usr/sbin/sshd -- $SSHD_OPTS

sshd starts up but now i cant login at all it keeps saying connection refused.
adding an ALL:ALL to hosts.allow doesnt help either.

Anyone that can tell me what is going wrong?

If you use the wrapper you will need to control the service through xinetd..

If you are trying to reject connections to sshd from unknown sources, it's better to use iptables..