########## # /etc/hsots.allow # #ALL : ALL : allow ALL : localhost : allow ALL : .running-dog.net : allow ALL : 192.168.1.0/255.255.255.0 : allow telnetd : 100.100.100.1,200.200.200.1 : allow telnetd : 100.200.1.0/255.255.255.0 : allow shell : 100.100.100.1,200.200.200.1 : allow shell : 100.200.1.0/255.255.255.0 : allow login : 100.100.100.1,200.200.200.1 : allow login : 100.200.1.0/255.255.255.0 : allow # Provide a small amount of protection for ftpd #ftpd : localhost : allow #ftpd : .nice.guy.example.com : allow #ftpd : .evil.cracker.example.com : deny ftpd : ALL : allow # Sendmail can help protect you against spammers and relay-rapers #sendmail : localhost : allow #sendmail : ALL : allow sendmail : running-dog.net : allow # Portmapper is used for all RPC services; protect your NFS! #portmap : ALL : allow portmap : localhost : allow portmap : 192.168.1.0/255.255.255.0 : allow portmap : .running-dog.net : allow fingerd : ALL \ : spawn (echo Finger. | \ /usr/bin/mail -s "tcpd\: %h[%a] fingered me!" root) & \ : deny # The rest of the daemons are protected. Backfinger and log by email. ALL : ALL \ : severity auth.info : spawn (/usr/bin/finger -l @%h | \ /usr/bin/mail -s "tcpd\: %u@%h[%a] tried to use %d (denied)" root) & \ : deny # : twist /bin/echo "You are not welcome to use %d from %h."