Re: [cobalt-users] Help?

[Kris Dahl <krislists@xxxxxxxxxxxxx>]

on 8/7/00 9:20 AM, H.P. Stroebel at hpstr@xxxxxxxxxxxxx wrote:

> Kris Dahl schrieb:
> 
>> Did you add it to all ports?  The hosts.deny file is for all services--the
>> computer can completely ignore all traffic from a host in the deny file.
> 
> that`s not 100% right :it affects only services started by inetd via
> tcpwrappers :

My bad. You are correct.

> if you want to affect ALL services, in my opinion the most simple way is
> rejecting it using the kernel`s routing table. so arriving packets from
> that ip are just "thrown away". i don`t know if this is possible using
> hostnames, though. that would be a firewalling job.

I would thinkg that using ipchains would probably be the way to go, or to
just go out and invest in a firewall.

-k