O.k
So I have blockhosts installed...I made the changes to hosts.allow and hosts.deny ie:
ALL: 127.0.0.1 : allow
ALL: 192.168.0. : allow
and
ALL: 10. : deny
ALL: 192. : deny
ALL: 172. : deny
and I think I figured out how to start the script: blockhosts.py --verbose
Whats confusing is the host.allow script directions:
sshd, proftpd, in.proftpd: ALL: spawn (/usr/bin/blockhosts.py --verbose --echo "%c-%s" >> /var/log/blockhosts.log 2>&1 )& : allow
The directions say to use this script for testing...am I suppose to delete the :allow at the end of the script or the whole script. If I delete the whole script how do I get this to work when someone tries to log in?
I am sorry...I'm not normally this dense this is just confusing the crap out of me!
Will Banks
willebanks@yahoo.com
how to test
Here's the snippet from the INSTALL file, on how to test - note that you should read up on hosts.allow man page, to understand what all this means:
# To test hosts.allow, and to find out exact names of SSH/FTP services,
# add this line to the beginning of hosts.allow, use ssh/ftp to connect
# to your server, and then look at the log (/var/log/messages or
# blockhosts.log) to see the name of the invoked service.
# IMPORTANT: after your test is done, remove this line from hosts.allow!
# Otherwise everyone will always have access.
#ALL : ALL: spawn (/usr/bin/blockhosts.py --verbose --echo "%c-%s" >> /var/log/blockhosts.log 2>&1 )& : allow