I'm not sure how different 7.3 is from 8.0, but the 7.3
version of openssh is compiled with tcp-wrappers, but
does not normally use xinted. Sshd is probably already
running as a separate daemon so what you put in xinetd.d/ssh
might have no effect.

> chkconfig --list sshd
should show something like
sshd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
if it is NOT controlled by xinetd.

or use
> lsof -I | grep ssh
and see what program is listening on ssh port.

you need to specify hosts in hosts.allow. If you put
sshd: 172.26.0.5
and it doesn't work then you need to check elsewhere.

Check /etc/ssh/sshd.conf for "listen" address lines.
Check your firewall configuration.

Cameron.

> -----Original Message-----
> From: Josep M. [mailto:[EMAIL PROTECTED]] 
> Sent: Saturday, 7 December 2002 01:33
> To: [EMAIL PROTECTED]
> Subject: SSH with TCP Wrappers
> 
> 
> Hi!
> 
> I try of put my SSH (redhat 8.0 updated yesterday) with TCP 
> Wrappers,looking at the package requires "tcp wrappers",so I 
> suppose will be compiled with,because read hosts.allow and 
> only give if allowed,i tried of put a file /etc/xinetd/ssh  
> and had not result when I want control 
> anything,SSH simply ignore these,oinly look hosts.allow .I 
> tried these two configurations:
> 
> 
> My IP is 172.26.0.6 ,so i MUST have forbidden to connect:
> 
> File one:
> 
> service ssh
> {
>     socket_type    = stream
>     protocol       = tcp
>     wait           = no
>     user           = root
>     port           = 22
>     server         = /usr/sbin/sshd
>     server_args    = -i
>     only_from      = 172.26.0.5
> 
> }
> 
> 
> File two
> 
> service sshd
> {
>         socket_type = stream
>         wait        = no
>         user        = root
>         server      = /usr/sbin/sshd
>         #It's not listed in my /etc/services
>         port = 22
>         server_args =  -i
>         #Allow access from the local network 
>         only_from   = 172.26.0.5
>         log_on_failure = ATTEMPT HOST RECORD
> 
> 
> }
> 
> 
> 
> 
> Any help will be appreciated.
> 
> Josep
> 
> 
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to