That should work.  We've also done the following which has worked just 
as well:

in.ftpd: 192.168.


This will deny everyone where the first two octets match.

Also you can do the following to filter out countries or other hosts


in.ftpd: .jp


will deny everyone in japan (or any other country you wish to filter out)


in.ftpd: .net


will deny everyone attaching with .net

We have an FTP server that was getting hit from all over the place.  
Eventually we denied everyone then in hosts.allow put in the ranges we 
ONLY wanted to allow in.  We get alot less ftp traffic these days :-)

Frank



> If you want to allow everyone but, for example, 192.168?
> 
> Then the hosts.deny file line should read:
> 
> in.ftpd: 192.168.0.0/255.255.255.0
> 
> As I recall, you always need the network address/netmask in there.
> 
> On Fri, 9 Mar 2001 [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> wrote:
> 
>  > i want to deny some hosts and ip addresses to access my ftp services,how should i 
>do
>  >
>  > #more /etc/hosts.allow
>  > in.ftpd:all
>  > #more/etc/hosts.deny
>  > in.ftpd:`192.168.?
>  >
>  > is that correct?
>  >
>  > i want to deny some ip addresses match my patterns,i man hosts.allow,the manual 
>say `192.168.? matches 192.168.*.*,i try,but it does not work



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to