hosts.deny and hosts.allow problem

Hi. I'm having trouble setting up my hosts.allow and hosts.deny files.
Basically I only want to be able to ssh in from one particular ip
address, e.g. xxx.xxx.xxx.xxx.

When my setup is:

# cat /etc/hosts.deny
ALL: ALL

# cat /etc/hosts.allow

I _cannot_ ssh in, as expected.



When it is:

# cat /etc/hosts.deny

# cat /etc/hosts.allow

I _can_ ssh in, as expected


But when it is:

# cat /etc/hosts.deny
ALL: ALL

# cat /etc/hosts.allow
sshd: xxx.xxx.xxx.xxx

I cannot ssh in.... I can't even get in when I do:

# cat /etc/hosts.allow
sshd: ALL

So it seems like hosts.deny works as I would anticipate, but
hosts.allow doesn't seem to be overuling hosts.deny.

Anyone have any clue? This is Redhat 9

Thanks in advance....

Dan

> Hi. I'm having trouble setting up my hosts.allow and hosts.deny files.
> Basically I only want to be able to ssh in from one particular ip
> address, e.g. xxx.xxx.xxx.xxx.
>
> When my setup is:
>
> # cat /etc/hosts.deny
> ALL: ALL
>
> # cat /etc/hosts.allow
>
> I _cannot_ ssh in, as expected.
>
> When it is:
>
> # cat /etc/hosts.deny
>
> # cat /etc/hosts.allow
>
> I _can_ ssh in, as expected
>
> But when it is:
>
> # cat /etc/hosts.deny
> ALL: ALL
>
> # cat /etc/hosts.allow
> sshd: xxx.xxx.xxx.xxx
>
> I cannot ssh in.... I can't even get in when I do:
>
> # cat /etc/hosts.allow
> sshd: ALL
>
> So it seems like hosts.deny works as I would anticipate, but
> hosts.allow doesn't seem to be overuling hosts.deny.

Strange... I have this identical setup, and it works fine. Maybe RH9
has a switch that determines whether hosts.allow overrules hosts.deny.
Or, maybe you have a syntax error (stray control character?) that
prevents hosts.allow from being parsed correctly. ??

--
To reply by email, replace "deadspam.com" by "alumni.utexas.net"

On Tue, 14 Jun 2005 20:58:15 GMT, Andrew Schulman wrote:

> Or, maybe you have a syntax error (stray control character?) that
> prevents hosts.allow from being parsed correctly. ??

bad ip address, or no carriage return after it.

Thanks much.....it was the missing carriage return.....