It was bound to happen - suspected hack

Jon Moss jon.moss at cnonline.net
Thu Oct 21 10:08:10 CDT 2004


I saw your modification in my research.  Thanks for confirming it.  I'll
add it to my hosts.allow file.

Thanks for the quick responses.

Jon

> I'd modify the hosts.allow file a bit more...
>
> i.e.
>
> sshd: localhost 192.168.0.0/255.255.255.0 12.30.163.*
> ALL:ALL:DENY
>
> This is a "catch-all" that is a best practice just incase the hosts.deny
> is misconfigured or not configured at all, although the ALL:ALL in your
> hosts.deny is correct.  It will deny access to all services that tcpd
> monitors to everything as a last resort.  Hence, if it's not explicitly
> defined to be allowed, it is by default denied.
>
> Just an idea...
>




More information about the Kclug mailing list