Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-Id: <200202071400.JAA21648@imap.web.aol.com>
Content-Type: text/plain;
  charset="iso-8859-1"
From: Prentis Brooks <prentis AT aol DOT net>
Reply-To: prentis AT aol DOT net
Organization: Internet Services, AOL Time Warner, Inc
To: "Chris _" <chriz_one AT hotmail DOT com>, cygwin AT cygwin DOT com
Subject: Re: /etc/hosts.allow & /etc/hosts.deny
Date: Thu, 7 Feb 2002 09:00:23 -0500
X-Mailer: KMail [version 1.3.2]
References: <F117gd6OXq5yUmlYhhu00019ead AT hotmail DOT com>
In-Reply-To: <F117gd6OXq5yUmlYhhu00019ead@hotmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

For host.allow to work for ssh,  you need to have tcp wrappers installed on 
the system.
also, the format for the hosts.allow file is 

service: host or IP list
so in your case, it should read
sshd: 192.168.1.100

Also, you need to update your services file to associate sshd with port 22

If you do a search for tcp wrappers on the mailing list you will find a 
conversation between myself, Corrina, and Mumit Khan (I think).  Mumit had 
provided a patch to tcp_wrappers version 7.6 which will be included in the 
next revision of tcp wrappers, so I recommend you use his patch.


On Thursday 07 February 2002 08:17 am, Chris _ wrote:
> Are these files implemented and if so, what is the format?  I had
> hosts.deny sort working but as soon as I put anything in hosts.allow any
> host can access the service.
>
> My hosts.deny was...
> ---
> #deny these hosts
> ALL: ALL
> ---
>
> My hosts.allow was...
> ---
> sshd: 192.168.1.100: ALLOW
>
> Nothing seems to work.  I tried tons of combinations with no results.
>
> tia
>
>
>
> _________________________________________________________________
> Join the world’s largest e-mail service with MSN Hotmail.
> http://www.hotmail.com

-- 
Prentis Brooks	| prentis AT aol DOT net | 703-265-0914 | AIM: PrentisBrooks
Senior System Administrator - Web Infrastructure & Security

       A knight is sworn to valor.  His heart knows only virtue.  His blade
       defends the helpless.  His word speaks only truth.  His wrath undoes
       the wicked. - the old code of Bowen, last of the dragonslayers

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/