hosts.allow help with ssh
Michael Cortes <[email protected]> Thu, 13 May 2004 08:11:55 -0400
| Newsgroups | gmane.linux.redhat.release.valhalla |
|---|---|
| Organization | Fort LeBoeuf School District |
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a couple servers behind the firewall, which don't have anything in the "hosts.allow" file. I wanted to provide more security so I copied and modified a "hosts.allow" file from another box. Below is my "hosts.allow" file with some hidden stuff (ip addresses) My problems are this: First: When I put the file on the server I wanted to "load" or "activate" it. (Not sure what the proper terminology is). I tried "service xinetd restart". Didn't work. So I just rebooted it. What is the proper way to do this? Second: One I rebooted and the hosts.allow was active, I could no longer ssh to this box from anywhere behind my firewall (same network as this server) and my main server in the DMZ could not mysql to it. The main server connects to the mysqld to pull up dynamic web site info. Can any help ************* hosts.allow ********************** sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" root) & : ALLOW sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" root) & : ALLOW sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" root) & : ALLOW sshd: 192.168.xxx. : (usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" root) & : ALLOW sendmail: ALL : ALLOW ipop3d: ALL : spawn (/usr/sbin/safe_finger -l | /bin/mail -s "Access by %d-%h" root) & : ALLOW imapd: ALL : spawn (/usr/sbin/safe_finger -l : /bin/mail -s "Access by %d-%h" root) & : ALLOW # Additional items ALL: xxx.xxx.xxx.xxx : ALLOW in.fingerd: ALL : spawn (/usr/sbin/safe_finger -l @%h | /bin/mail -s "Finger Access %d-%h" root) & : ALLOW ALL : ALL : spawn (/usr/sbin/safe_finger -l @%h | /bin/mail -s "Port Denial noted %d-%h" root) & : DENY - -- Michael Cortes Fort LeBoeuf School District 34 East Ninth Street PO Box 810 Waterford PA 16441-0810 814.796.4795 AIM: cortesm67 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFAo2YOoPG25PauKIkRAvucAKCury4OlcMt9/zdMc/yc50wLYN/VACg0SZU 5tcdRZc9on4JS2A6BW/8m+4= =9lSO -----END PGP SIGNATURE-----