Re: [cobalt-users] PortSentry ain't impotent

[flash22@xxxxxxx]

On Fri, 25 May 2001, Gerald Waugh wrote:

> <flash22@xxxxxxx> wrote
> > 
> > But you do have to restart inetd ;)
> > There is an rc.d script....
> gsh,
> Why do you have to restart inetd?
> 
> I ran the following test:
> ssh to the RaQ.
> Put my IP in host.deny, saved the file
> Opened another ssh session, denied, could not get in.
> Edited host.deny with the first ssh session.
> Removed my IP and saved the file.
> Opened another ssh session and got in.
> Did not restart inetd.

Right, because ssh runs as a standalone daemon, it reads the file itself,
but services accessed via etc/inetd.conf don't....

not resetting inetd will cause inconsistant results , www, ftp, ssh will
see changes, but imapd,pop2 etc won't....

gsh