[SunHELP] tcp_wrappers

Chris Pinnock cjep at fawlty.net
Mon Dec 9 14:19:43 CST 2002


On Mon, Dec 09, 2002 at 02:54:18PM -0500, Simoncini, Matthew wrote:
> Hi gurus,
> 
> I'm installing tcp_wrappers (with OpenSSH) on a test box and the
> configuration doc says:
> 
> 1) Create a hosts.deny and add the line "sshd:ALL"
> 2) Create a hosts.allow and add the IP addresses of the servers/workstations
> that you want to give access to your server
> 
> That works great when all of your servers/workstations have static IP
> addresses, but when we tunnel in from home we have dynamic IP addresses. If
> there a way to add ranges to the hosts.allow (as I know what the rang is for
> our VPN tunnel)?

Yes there is. You can use host/netmask pairs instead of IP addresses.
e.g 10.0.0.0/255.255.255.0

best wishes,
Chris



More information about the SunHELP mailing list