Re: Question about blocking IP's

"yas_chan" <nestor_kun@xxxxxxxxxxx> writes:

>Now I understand! But let's say I want to run WWW service, and people
>from different addresses would be using my system. If hosts.deny blocks
>ALL those addresses which I didn't write to hosts.allow - how can
>someone I don't know use my system?

Well, write then all to the host.allow if that is what you want.
ALL meand all also in host.allow.


>----

>Tcpwrappers first looks to see if access is permitted in
>/etc/hosts.allow, and if so, access is granted. If not in
>/etc/hosts.allow, the file /etc/hosts.deny is then checked to see if
>access is not allowed. If so, access is denied. Else, access is
>granted. For this reason, /etc/hosts.deny should contain only one
>uncommented line, and that is: ALL: ALL. Access should then be
>permitted through entries in /etc/hosts.allow, where specific services
>are listed, along with the specific host addresses allowed to access
>these services. While hostnames can be used here, use of hostnames
>opens the limited possibility for name spoofing.

.

Relevant Pages