Re: access limitation

Marius Tomaschewski <[email protected]> Fri, 19 Apr 2002 12:06:06 +0200
Newsgroups gmane.linux.suse.proxy-suite
Organization SuSE Labs, Product Developement
Message-ID <[email protected]>
On Mon, Apr 15, 2002 at 02:04:59PM +0200, Michael Schams wrote:
> huhu.

Hi!

> is there a possibility to limit the access for clients to defined hosts/
> IPs? some ftp-servers (e.g. "ProFTPD", http://www.proftpd.org) allow
> apache-style directives like
>
>   <Limit LOGIN>
>     Order deny,allow
>     Deny from .evil.net
>     Allow from all
>   </Limit>
>

Use "TCPWrapper yes" in ftp-proxy.conf in /etc/hosts.allow:

ftp-proxy: DENY .evil.net


If you have more than one proxy running, you can set the
name as well, i.e. "TCPWrapperName ftp-intern".

> are there any solutions? I miss something like
> 
>   DenyConnections *.evil.net, bill-gates.com, 207.46.230.220
>   AllowConnections *.suse.de
> 
> in the "ftp-proxy.conf" file.

RTFMP:  ftp-proxy.conf(5), hosts_access(5).

Gruesse,
 Marius Tomaschewski <[email protected]>
--
 SuSE Linux AG, Nürnberg - SuSE Labs, Product Developement
 PGP public key available:   http://www.suse.de/~mt/mt.pgp
 Fprint:  EA 1F 92 75 1A F9 82 07  A1 28 DE 7A 32 E8 97 18

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]