[OpenIndiana-discuss] Does OpenIndiana's sshd obeys TCP wrappers?
    Hubert Garavel 
    hubert.garavel at inria.fr
       
    Sun Dec 23 10:39:27 UTC 2018
    
    
  
By default, support for TCP wrappers was removed from  OpenSSH, unless
it is compiled with the proper option. This seems to be indeed the case
for OI's sshd:
	# ldd /usr/lib/ssh/sshd
	libwrap.so.1 =>  /usr/lib/64/libwrap.so.1
However, after setting "/etc/hosts.deny" to "ALL: ALL" and
"/etc/hosts.allow" to a single line "sendmail: localhost",
sshd still accepts incoming connections from other hosts,
whereas such incoming SSH connections should be blocked by
the TCP wrappers.
Any idea?
    
    
More information about the openindiana-discuss
mailing list