Re: problem with sshd 1.2.27

[David Terrell <dbt@meat.net>]

On Thu, Jun 10, 1999 at 10:58:51AM -0700, James J. Lippard wrote:
> I don't know if this is a problem in general or with the OpenBSD port, but
> some behavior has apparently changed recently with libwrap...
> 
> It is now the case that if you have a hosts.allow that lists specific
> hosts allowed to connect via ssh, ANY host can connect with ssh--unless
> you also have a hosts.deny that has an explicit "sshd: ALL" in it.

tcp_wrappers always defaults to allow unless you have a deny rule that
matches (service: ALL [ : DENY ] or ALL: ALL [ : DENY ] in hosts.deny).

-- 
David Terrell
dbt@meat.net, dbt@nebcorp.com    I may or may not be speaking for Nebcorp,
http://wwn.nebcorp.com/~dbt/         but Nebcorp has spoken for you.