Re: Question about blocking IP's

Now I understand! But let's say I want to run WWW service, and people
from different addresses would be using my system. If hosts.deny blocks
ALL those addresses which I didn't write to hosts.allow - how can
someone I don't know use my system?

----

Tcpwrappers first looks to see if access is permitted in
/etc/hosts.allow, and if so, access is granted. If not in
/etc/hosts.allow, the file /etc/hosts.deny is then checked to see if
access is not allowed. If so, access is denied. Else, access is
granted. For this reason, /etc/hosts.deny should contain only one
uncommented line, and that is: ALL: ALL. Access should then be
permitted through entries in /etc/hosts.allow, where specific services
are listed, along with the specific host addresses allowed to access
these services. While hostnames can be used here, use of hostnames
opens the limited possibility for name spoofing.

.

Relevant Pages