[lug] hosts.deny not denying

gordongoldin at netscape.net gordongoldin at netscape.net
Wed Jan 31 11:06:53 MST 2007


 Saw something scarey with hosts.
 
I configure servers in the office and then carry them out to the field.  
For security, I set hosts. like this: allow localhost, my VPN - 10..., and my environment.
(A)
/etc/hosts.deny
ALL: ALL
/etc/hosts.allow
ALL: localhost, 10.10.10., 128.138.
Every time I take a server out, I forget this, then get a message: "connection closed..."

Then I add the local environment (10.146.), and I can get in:
(B)
 /etc/hosts.deny
ALL: ALL
/etc/hosts.allow
ALL: localhost, 10.10.10., 128.138., 10.146.

This time, I re-used and upgraded the same server that was there before.  
And all the PCs could get to it.  
WITHOUT the new environment added..... see (A) above.

I am going directly from FC3 to FC5 and have seen a couple little wierdnesses, like not being able to access a gateway.
But all the other machines like this wouldn't respond until hosts.allow had the local environment.
 
Here is ifconfig:
eth0      Link encap:Ethernet  HWaddr 00:0C:F1:AA:24:EF  
          inet addr:10.146.130.250  Bcast:10.146.131.255  Mask:255.255.252.0
          inet6 addr: fe80::20c:f1ff:feaa:24ef/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:51939 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14030 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:4644340 (4.4 MiB)  TX bytes:3189579 (3.0 MiB)
          Base address:0xdf40 Memory:fcfe0000-fd000000 
lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:3162 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3162 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2353612 (2.2 MiB)  TX bytes:2353612 (2.2 MiB)
tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.10.10.38  P-t-P:10.10.10.37  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:112 errors:0 dropped:0 overruns:0 frame:0
          TX packets:73 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:9830 (9.5 KiB)  TX bytes:9952 (9.7 KiB)
________________________________________________________________________
Check Out the new free AIM(R) Mail -- 2 GB of storage and industry-leading spam and email virus protection.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20070131/cee27fa5/attachment.html>


More information about the LUG mailing list