Re: [cobalt-users] Help?

["H.P. Stroebel" <hpstr@xxxxxxxxxxxxx>]

Kris Dahl schrieb:

> Did you add it to all ports?  The hosts.deny file is for all services--the
> computer can completely ignore all traffic from a host in the deny file.

that`s not 100% right :it affects only services started by inetd via
tcpwrappers :

Operation is as follows: whenever a  request  for  service
       arrives, the inetd daemon is tricked into running the tcpd
       program instead of  the  desired  server.  tcpd  logs  the
       request and does some additional checks. When all is well,
       tcpd runs the appropriate server program and goes away.
(from : man tcpd)

this DOES NOT affect e.g. apache, as it is configured by default as a
standalone server (not started via inetd), sendmail, sshd if run by
shell command or via rc.local.

if you want to affect ALL services, in my opinion the most simple way is
rejecting it using the kernel`s routing table. so arriving packets from
that ip are just "thrown away". i don`t know if this is possible using
hostnames, though. that would be a firewalling job.

-- 

H. P.  Stroebel, Germany

CGI-FAQ for Raq-Newbies :
http://users.iol.it/hpstr/

A problem to some is a 'feature' to others.