[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] SSH EXPLOIT IN THE WILD

Hi!


  Yes, it you put this "as is" (eg sshd: ALL: spawn ...) in your hosts.allow
you are ALLOWING all ssh connections. (no entry in either hosts.allow or
hosts.deny also means allow all)
O.K., but if I had no restrictions, I would not unsecure it more with that, eh? :) 


  Highly recommend changing the ALL to specific IP addresses/ranges in the
hosts.allow file, then use the ALL format in the hosts.deny to deny
everything else (in other words allow only those you know/trust, then deny
everything else).


"ranges" - how to set up a range?
I tried "sshd: 80.81.*.*[...]" and just "sshd: 80.81 [...]" but that doesn't work. 

Of course I put "all" in the hosts.deny file...

Thanks, Frank