[TriLUG] hosts.deny question?

[Cristobal Palmer]

The header in my Ubuntu install is more informative. See if this helps:

# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
#                  See the manual pages hosts_access(5), hosts_options(5)
#                  and /usr/doc/netbase/portmapper.txt.gz
#
# Example:    ALL: some.host.name, .some.domain
#             ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap(8)
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address.
#
# You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID

-CMP

On 3/6/06, WA Brown <brownwa at ftc-i.net> wrote:
> Hello all,
>       I am new to this group and linux. I hope you tolerate another
> "newbie". I have a server online at www.havenstead.net and am learning how
> to do things with it everyday. I am running Redhat9 with an Apache 2.0
> server.
>
> This is what I have in the "hosts.deny" file. What have I got wrong?
>
> #
> # hosts.deny    This file describes the names of the hosts which are
> #               *not* allowed to use the local INET services, as decided
> #               by the '/usr/sbin/tcpd' server.
> #
> # The portmap line is redundant, but it is left to remind you that
> # the new secure portmap uses hosts.deny and hosts.allow.  In particular
> # you should know that NFS uses portmap!
>
>
>
>       Order allow,deny
>       Allow from all
>
>       Deny from 218.64.*.*
>       Deny from 61.134.32.18
>
>
> This what i am getting on my report. How should it be listed?
>
> WA Brown
>
>
> 6 02:45:02 www sshd[32311]: Did not receive identification string from
> 211.171.202.87
>
> Mar 6 07:50:10 www sshd[5322]: warning: /etc/hosts.deny, line 12: missing
> ":" separator
>
> Mar 6 07:50:10 www sshd[5322]: warning: /etc/hosts.deny, line 13: missing
> ":" separator
>
> Mar 6 07:50:10 www sshd[5322]: warning: /etc/hosts.deny, line 15: missing
> ":" separator
>
> Mar 6 07:50:10 www sshd[5322]: warning: /etc/hosts.deny, line 16: missing
> ":" separator
>
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
>


--

Cristobal M. Palmer
UNC-CH SILS Student
cristobalpalmer at gmail.com
cmpalmer at ils.unc.edu
ils.unc.edu/~cmpalmer
"Television-free since 2003"