need help with hosts.allow

[killerasp]

what do i need in hosts.allow to let localhost and ip. 123.456.789.101 in?

[posterboy]

The format looks like this:
ALL: 127.0.0.1
ALL: somebox.domain.com
Ray

[killerasp]

do i need to put in the second line?

[bdg1983]

You can put in anything you like. I think the hosts.deny is read first and then hosts.allow. Configure accordingly.

'man hosts.allow' and 'man hosts.deny' should give you all you need and the correct syntax to allow ip's.

[bdl]

Actually, it's 'man 5 hosts_access' or just 'man hosts_access'. Your hosts.allow files should look like this:


# /etc/hosts.allow

ALL: LOCAL EXCEPT PARANOID
ALL: 123.456.789.101/netmask

## where netmask is your IP's netmask, whether its 255.255.255.0 or other.

Your /etc/hosts.deny file should contain at least:

ALL: ALL

...this will deny all other matches not found in hosts.allow. Luck!

PS: I should mention that you can list only the services you want allowed to only the hosts you want allowed, so for example, if the IP you gave only needs shell access and you still want to limit all other services (which is a good idea, only allow what is absolutely necessary) you could do so like this:

## another example /etc/hosts.allow

in.telnetd: 123.456.789.101/netmask

... and so on.

[ 01 April 2001: Message edited by: bdl ]

[bdg1983]

One of them should work...

I'm sure I've used 'man host.allow or deny' previously which also suggest the other man pages.

The point is, read the man pages.