> 
> Chris Maness wrote:
> 
> > Daniel A. wrote:
> > > On 3/19/06, Chris Maness <[EMAIL PROTECTED]> wrote:
> > >> My denyhost script is doing it's job by adding:
> > >>
> > >> sshd: 62.149.232.105 : deny
> > >>
> > >> to the hosts.allow file, but I see that this host is still making
> > >> attempts to get into my box.  Is there a cron job or something
> > >> that has to re-read the hosts.allow file before it the IP will be
> > >> blocked? _______________________________________________
> > >> freebsd-questions@freebsd.org mailing list
> > >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > >> To unsubscribe, send any mail to
> > >> "[EMAIL PROTECTED]"
> > >
> > > Offtopic, but
> > > How did you set up denyhosts? Daemon? Cron?
> >
> > p.s.
> >
> > OK, I was able to get to work by just starting out with a blank
> > hosts.allow.  Everything is allowed by default, so when denyhosts
> > adds a deny line to the file, it will deny access to that host.
> >
> > Also, sshd can't be started in rc.conf, it has to be started in
> > inetd.conf.  Make sure you do a /etc/rc.d/inetd restart after you
> > make changes.
> 
> Just out of curiosity, why can 'sshd' not be started from the=20
> '/etc/rc.conf' file?

Hmmm.   Do you want sshd or inetd listening on the port and being the
first one to screen things?

Anyway, inetd provides some front end checking and doesn't even start
it if it isn't from an acceptable place.

jerry

> 
> =2D-=20
> Gerard Seibert
> [EMAIL PROTECTED]
> 
> PGP: http://www.seibercom.net/sig/gerard.asc
> 
> --nextPart3654328.GjrC4HtVEj
> Content-Type: application/pgp-signature
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2.1 (FreeBSD)
> 
> iD8DBQBEHXmFchM2dIO+3uMRAhLqAJ4yUlAdv8F4iOR6XroOBGA1gfmx2wCghmaI
> JA15rhv79wmvbeNUMHdZzXY=
> =irtd
> -----END PGP SIGNATURE-----
> 
> --nextPart3654328.GjrC4HtVEj--
> 

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to