[syslog-ng]syslog-ng 1.6.4 and tcp_wrappers

Amaral, Angelo syslog-ng@lists.balabit.hu
Thu, 22 Jul 2004 11:10:40 -0300


Andrew,

I put in my system, the hosts.allow below:

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=
+++++

# hosts.allow   This file describes the names of the hosts which are
#               allowed to use the local INET services, as decided
#               by the '/usr/sbin/tcpd' server.
#

in.tftpd:       ALL     :allow
sshd:           ALL     :allow
ALL:            ALL     :deny

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=
+++++

And the configuration continue not working.
May you help me, please.

Thanks.


-----Original Message-----
From: syslog-ng-admin@lists.balabit.hu
[mailto:syslog-ng-admin@lists.balabit.hu]On Behalf Of Andrew J Caines
Sent: quarta-feira, 21 de julho de 2004 20:25
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng 1.6.4 and tcp_wrappers


Angelo,

> I compile the syslog-ng with support tcpwrappers.
> I put in hosts.deny my filter and it?s not work.

>From reading the documentation, you and Joe should be aware that =
hosts.deny is depreciated and that deny statements go in hosts.allow, =
eg.

ALL :		localhost 127.0.0.1 your.server.or.IP	: allow
sshd :		ALL : severity auth.info		: allow
syslog-ng :	your.network				: allow
ALL :		ALL :  severity auth.notice : \
		twist echo "You are not welcome to use %d from %h."

You should also see any errors or warnings when you run tcpdchk.


-Andrew-
--=20
 _______________________________________________________________________
| -Andrew J. Caines-   Unix Systems Engineer   A.J.Caines@halplant.com  =
|
| "They that can give up essential liberty to obtain a little temporary =
|
|  safety deserve neither liberty nor safety" - Benjamin Franklin, 1759 =
|
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html