RE: [cobalt-users] SSH EXPLOIT IN THE WILD

["agility" <webmgr@xxxxxxxxxxxxxxxxxx>]

> > how did you limit ssh connections again from hosts.deny and or 
> hosts.allow
> > ???
> > 
> > Any thougths about it in general ??
> 
> Robbert
> 
> We do this:
> 
> Hosts.allow >>
> #
> # hosts.allow   This file describes the names of the hosts which are
> #               allowed to use the local INET services, as decided
> #               by the '/usr/sbin/tcpd' server.
> #
> SSHD: 123.123.123.123
> in.telnetd: 123.123.123.123
> 
> On the hosts.deny >>
> 
> #
> # hosts.deny    This file describes the names of the hosts which are
> #               *not* allowed to use the local INET services, as decided
> #               by the '/usr/sbin/tcpd' server.
> #
> SSHD: ALL
> in.telnetd: ALL
dumb question, but do you have to restart (how) sshd after modding the 
hosts.deny/allow files?

Or are they read each time a connection is attempted?