Re: [TCLUG:19894] SSH Working. Thanks!

[Gabe Turner (officer) <dopp@acm.cs.umn.edu>]

Actually, you don't even need a hosts.deny.  Just add DENY: ALL to the top of your hosts.allow.

Gabe

On Thu, Jul 27, 2000 at 01:45:58PM -0500, Jason J wrote:
> All I have in my hosts.deny is ALL: ALL.
> Then I let only the things I want through with hosts.allow.
> 
> I was under the impression this was the most secure way to do it.
> 
> 
> 
> Andy Zbikowski wrote:
> 
> > Hmmm, betcha you have a ALL:Parinoid entry in /etc/hosts.deny. With that
> > option, you won't be able to access just about everything if your ip and
> > hostname don't matchup/resolve. The soultion is, fix your host name. =)
> >
> > You could add a ALL: IP Range of your ISP to hosts.allow, or if your on
> > static IP add a entry to /etc/hosts on the server machine. If your going
> > from an internal host to an internal host, get bind working to resolve
> > names for your internal network or add an entry in /etc/hosts for every
> > machine.
> >
> > --
> >         \\\|///
> >       \\  - -  //
> >        (  @ @ )
> > ----oOOo--(_)-oOOo--------------------------------------------
> > Andy Zbikowski, Sys Admin   | (WEB) http://www.ltiflex.com
> > LTI Flexible Products, Inc. | (PH)  763-428-9119 (EX) 132
> > 21801 Industrial Blvd       | (FX)  763-428-9126
> > Rogers, MN  55374           | (PCS) 612-306-6055
> > ---------------Ooooo------------------------------------------
> >                (   )
> >       ooooO     ) /
> >       (   )    (_/
> >        \ (
> >         \_)
> >
> >   ------------------------------------------------------------------------
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > For additional commands, e-mail: tclug-list-help@mn-linux.org
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org

-- 
--------------------------------------------------------------------------------
Gabe Turner				       |  	   X-President,
UNIX Systems Administrator,		       | Assoc. for Computing Machinery
U of M Supercomputing Institute for	       |    Univerisity of Minnesota
Digital Simulation and Advanced Computation    |       dopp@acm.cs.umn.edu

"I'm gonna be a monkey.  Monkey, monkey, monkey......"
					- Stimpy in "Monkey See, Monkey Don't"
--------------------------------------------------------------------------------