Subject: Re: telnetd and ftpd won't work
To: T@W <lsp93@xs4all.nl>
From: gabriel rosenkoetter <gr@eclipsed.net>
List: port-i386
Date: 02/11/2001 12:17:01
On Sun, Feb 11, 2001 at 07:29:18AM +0100, T@W wrote:
> Isn't /etc/hosts.deny redundant and therefor should be ignored/deleted?

Uh? No, not at all.

Have a look at hosts_access(5). Especially:

       o      Access  will be granted when a (daemon,client) pair
              matches an entry in the /etc/hosts.allow file.

       o      Otherwise, access  will  be  denied  when  a  (dae-
              mon,client)   pair   matches   an   entry   in  the
              /etc/hosts.deny file.

       o      Otherwise, access will be granted.

(Though I missed the original question, reading this man page for a
proper understanding of how tcp_wrappers works would probably also
help services that seem like they should be accepting connections
but aren't.)

       ~ g r @ eclipsed.net