Re: [leaf-user] SSH & Bering Leaf

[Jeff N. <jdn...@dc...>]

On Sun, 22 Sep 2002, Matthew Schalit wrote:

>=20
> Jacques Nilo wrote:
> > Le Dimanche 22 Septembre 2002 21:31, sr a =E9crit :
>=20
> >>or is there more to do?
>=20
> > Yes
> > Check hosts.allow :-)
> >=20
> > Jacques
>=20
> Hosts.allow only comes into play if sshd is being started via /etc/inted.=
conf:

Matt... sshd also checks /etc/hosts.allow itself if compiled to do so. =20
Most binaries for LEAF boxen are compiled this way.

> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D
> #:OTHER: Other services
> ssh    stream  tcp     nowait  root    /usr/sbin/tcpd  /usr/sbin/sshd -i
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D
>=20
> Following your docs, this would be commented out, and
> the daemon would be running standalone from init.  A better
> line in your /etc/shorewall/rules would be something like:
>=20
> ACCEPT  net:128.287.333.12     fw   tcp   22
>=20
> or
>=20
> ACCEPT  net:128.287.333.0/24   fw   tcp   22
>=20
> if'n you know where'n ya'll are gonna be comin' from,
> because it's more restrictive.
>=20
> regards,
> matthew
>=20
>=20
>=20
>=20
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
>=20

---------------------------------------------------------------------------
Jeff Newmiller                        The     .....       .....  Go Live...
DCN:<jdn...@dc...>        Basics: ##.#.       ##.#.  Live Go...
                                      Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/Batteries            O.O#.       #.O#.  with
/Software/Embedded Controllers)               .OO#.       .OO#.  rocks...2k
---------------------------------------------------------------------------