Re: [cobalt-users] new openssl vulnerabilities

[Larry Smith <lesmith@xxxxxxxxx>]

INRE RE: [cobalt-users] new openssl vulnerabilities:
> how would you used hosts.deny to block all access to port 22 except
> from a list of specified ip's?

You could use the "EXCEPT" tag in hosts.deny

SSHD:  ALL EXCEPT <IP>, <IP>:  DENY

but much better would be to use hosts.allow for the "good" guys

sshd:  <ip>:  ALLOW

then in hosts.deny do an total exclude of everthing else:

sshd:  ALL:


-- 
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx