Re: [cobalt-users] Allowing / Blocking IP for all services

["Colin J. Raven" <cjraven@xxxxxxxxxxx>]

> > > We want to allow only 2 or 3 IP numbers to access our FTP, SSH and
> e-mail
> > > services. Any other IP numbers must be blocked.
> >
> > Sure, use ip-chains or setup ftp, ssh and email so that they all will be
> > accessed through tcpwrappers and put in ALL: ALL in hosts.deny, and only
> put
> > the allowed ip-numbers in hosts.allow.
> 
> How do you setup ftp, ssh and telnet through tcpwrappers?
> 
GREAT question!!! Thanks for posting it.
I'd like to know for the sake of already secure ssh, (and it's cousin scp)
but I'd rather not do telnet, no matter what there is some part of the
subnet that can read passwords from the originating party in the clear,
and that's *before* it arrives at the listening port.
-Colin