hosts.allow help with ssh

Michael Cortes <[email protected]> Thu, 13 May 2004 08:11:55 -0400
Newsgroups gmane.linux.redhat.release.valhalla
Organization Fort LeBoeuf School District
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have a couple servers behind the firewall, which don't have anything in the 
"hosts.allow" file.  I wanted to provide more security so I copied and 
modified a "hosts.allow" file from another box.

Below is my "hosts.allow" file with some hidden stuff (ip addresses)

My problems are this:

First:

When I put the file on the server I wanted to "load" or "activate" it.  (Not 
sure what the proper terminology is).  I tried "service xinetd restart".  
Didn't work.  So I just rebooted it.  What is the proper way to do this?

Second:

One I rebooted and the hosts.allow was active, I could no longer ssh to this 
box from anywhere behind my firewall (same network as this server) and my 
main server in the DMZ could not mysql to it.  The main server connects to 
the mysqld to pull up dynamic web site info.


Can any help



*************	hosts.allow	**********************

sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" 
root) & : ALLOW
sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" 
root) & : ALLOW
sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" 
root) & : ALLOW
sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" 
root) & : ALLOW

sendmail: ALL : ALLOW

ipop3d: ALL : spawn (/usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" 
root) & : ALLOW

imapd:  ALL : spawn (/usr/sbin/safe_finger -l : /bin/mail -s "Access by %d-%h" 
root) & : ALLOW

#  Additional items

ALL: xxx.xxx.xxx.xxx : ALLOW

in.fingerd: ALL : spawn (/usr/sbin/safe_finger -l @%h | /bin/mail -s "Finger 
Access %d-%h" root) & : ALLOW

ALL : ALL : spawn (/usr/sbin/safe_finger -l @%h | /bin/mail -s "Port Denial 
noted %d-%h" root) & : DENY


- -- 

Michael Cortes
Fort LeBoeuf School District
34 East Ninth Street
PO Box 810
Waterford PA 16441-0810
814.796.4795
AIM: cortesm67
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFAo2YOoPG25PauKIkRAvucAKCury4OlcMt9/zdMc/yc50wLYN/VACg0SZU
5tcdRZc9on4JS2A6BW/8m+4=
=9lSO
-----END PGP SIGNATURE-----