TCP Wrappers

[Edward Krack]

Aaron Konstam:


Kaushal Shriyan:
    > I am using TCP Wrappers, In the /etc/hosts.deny
    > vsftpd : ALL EXCEPT : localhost
    > but doesnot work for me I want to deny FTP Service to localhost

Aaron Konstam:
    > Why not use hosts.deny for this,

I think his rule should be:
vsftpd : ALL EXCEPT LOCAL
ALL : ALL : spawn (/bin/echo ATTACK from %a on %d | mail
kaushalshriyan at gmail.com)

Deny external access to the remote daemon.
For better security, make the last ( 2 ) entry/s in hosts.allow.
ALL : ALL : DENY
ALL : DENY

hosts.allow takes precedence over hosts.deny.

My $0.02

Krack