It was bound to happen - suspected hack
    Jon Moss 
    jon.moss at cnonline.net
       
    Thu Oct 21 10:08:10 CDT 2004
    
    
  
I saw your modification in my research.  Thanks for confirming it.  I'll
add it to my hosts.allow file.
Thanks for the quick responses.
Jon
> I'd modify the hosts.allow file a bit more...
>
> i.e.
>
> sshd: localhost 192.168.0.0/255.255.255.0 12.30.163.*
> ALL:ALL:DENY
>
> This is a "catch-all" that is a best practice just incase the hosts.deny
> is misconfigured or not configured at all, although the ALL:ALL in your
> hosts.deny is correct.  It will deny access to all services that tcpd
> monitors to everything as a last resort.  Hence, if it's not explicitly
> defined to be allowed, it is by default denied.
>
> Just an idea...
>
    
    
More information about the Kclug
mailing list