Re: hosts.deny and hosts.allow problem

From: Andrew Schulman (andrex_at_deadspam.com)
Date: 06/14/05 

Date: Tue, 14 Jun 2005 20:58:15 GMT

> Hi. I'm having trouble setting up my hosts.allow and hosts.deny files.
> Basically I only want to be able to ssh in from one particular ip
> address, e.g. xxx.xxx.xxx.xxx.
>
> When my setup is:
>
> # cat /etc/hosts.deny
> ALL: ALL
>
> # cat /etc/hosts.allow
>
> I _cannot_ ssh in, as expected.
>
> When it is:
>
> # cat /etc/hosts.deny
>
> # cat /etc/hosts.allow
>
> I _can_ ssh in, as expected
>
> But when it is:
>
> # cat /etc/hosts.deny
> ALL: ALL
>
> # cat /etc/hosts.allow
> sshd: xxx.xxx.xxx.xxx
>
> I cannot ssh in.... I can't even get in when I do:
>
> # cat /etc/hosts.allow
> sshd: ALL
>
> So it seems like hosts.deny works as I would anticipate, but
> hosts.allow doesn't seem to be overuling hosts.deny.

Strange... I have this identical setup, and it works fine. Maybe RH9
has a switch that determines whether hosts.allow overrules hosts.deny.
Or, maybe you have a syntax error (stray control character?) that
prevents hosts.allow from being parsed correctly. ?? 

-- 
To reply by email, replace "deadspam.com" by "alumni.utexas.net"

Relevant Pages

  • Re: Syslog over SSH
    ... I believe I have figure out my ssh tunnel problems, however, I am still ... I have setup public key encryption to keep from having to ... directly using syslog and changed the configuration to test with SSH ... to bind to the syslog port) ...
    (RedHat)
  • Re: Help needed with server setup at work
    ... Greg Folkert wrote: ... good SSH practices, there is really no additional server-side setup you ... With properly setup homedirs nothing needs to be worried ... What about them poking around on the server setup? ...
    (Debian-User)
  • Re: ipfw and ssh
    ... You neglected to include the 'add' in your first fwcmd. ... # Allow setup of incoming ssh ... Since the rest of it should be taken care of by the rest of the 'client' ipfw ...
    (freebsd-questions)
  • strange ssh performance issues
    ... windows version of the SonicWall client. ... a copy of VirusXP. ... instructions here to install the ssh server: ... I also setup an ssh key so I could login to the M of VirusXP without a ...
    (Fedora)
  • Re: strange ssh performance issues
    ... First let me say that I have a fairly unusual ssh setup, and I hate the virus known as windows ... until we figure this out the solution is to use the windows version of the SonicWall client. ... I also setup an ssh key so I could login to the M of VirusXP without a password. ...
    (Fedora)