what is the valid delimiters for hosts.allow?

ultrakiasu · 04-23-2019, 04:14 AM

i need to allow ALL services to not just a range of ip but from different network segments.

10.1.x.x
20.2.x.x
30.3.x.x

how could i add them in hosts.allow?

ALL : 10.1. 20.2. 30.3.

Is the above valid? or should i use commas as delimiter?

Saw some threads having a @ sign before the IP, what is the function?

Turbocapitalist · 04-23-2019, 05:54 AM

hosts.allow aka tcpwrappers aka tcpd has been deprecated for a long time and many services no longer even recognize it. So odds are you need to find a different way. So I have two clarifying questions:

Which service would this be for? And which distro, including version, is this on?

ultrakiasu · 04-23-2019, 08:52 PM

redhat 7.x (64bit)

Trying to fix nessus scan non-compliance to CIS security template.

scasey · 04-23-2019, 11:30 PM

Have you read man hosts.allow? After that, do you still have questions?
Think one entry per line...

unSpawn · 05-04-2019, 04:58 AM

Quote:

Originally Posted by ultrakiasu

redhat 7.x (64bit)
Trying to fix nessus scan non-compliance to CIS security template.

Doesn't mean you should use tcp_wrappers. As TC said it's deprecated. So use the firewall.