[DEBIAN SARGE] problems setting up sshd to use tcpwrapper

nonutopia · 08-16-2005, 04:08 PM

Im trying to setup the python script denyhosts but my sshd currently ignores the files host.deny and hosts.allow. So it seems I need to run it trough a tcpwrapper.

I changed the ssh startup script so it starts sshd like this:

Code:

start-stop-daemon --start --quiet --pidfile /var/run/sshd.pid --exec /usr/sbin/tcpd /usr/sbin/sshd -- $SSHD_OPTS

sshd starts up but now i cant login at all it keeps saying connection refused.
adding an ALL:ALL to hosts.allow doesnt help either.

Anyone that can tell me what is going wrong?

peter_robb · 08-23-2005, 08:04 AM

If you use the wrapper you will need to control the service through xinetd..

If you are trying to reject connections to sshd from unknown sources, it's better to use iptables..