Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Mar 2006 17:17:37 -0800
From:      Chris Maness <chris@chrismaness.com>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: hosts.allow ?
Message-ID:  <441CB131.3020506@chrismaness.com>
In-Reply-To: <20060319004947.GA65074@xor.obsecurity.org>
References:  <441CA1F9.20301@chrismaness.com> <20060319004947.GA65074@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote:
> On Sat, Mar 18, 2006 at 04:12:41PM -0800, Chris Maness wrote:
>   
>> My denyhost script is doing it's job by adding:
>>
>> sshd: 62.149.232.105 : deny
>>
>> to the hosts.allow file, but I see that this host is still making 
>> attempts to get into my box.
>>     
>
> Where do you see this (i.e. logged by what)?  hosts.allow doesn't
> block the IP from connecting to the port, it blocks the application
> that listens on the port from allowing this IP to authenticate.
> e.g. your firewall may still log the connection.
>
>   
in auth.log




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?441CB131.3020506>