diff --git a/etc/hosts.allow b/etc/hosts.allow index d8645a5673c9..67f0ba000a84 100644 --- a/etc/hosts.allow +++ b/etc/hosts.allow @@ -7,8 +7,15 @@ # see hosts_options(5) for the format of this file. # hosts_access(5) no longer fully applies. -# This is an example! You will need to modify it for your specific -# requirements! +# _____ _ _ +# | ____| __ __ __ _ _ __ ___ _ __ | | ___ | | +# | _| \ \/ / / _` | | '_ ` _ \ | '_ \ | | / _ \ | | +# | |___ > < | (_| | | | | | | | | |_) | | | | __/ |_| +# |_____| /_/\_\ \__,_| |_| |_| |_| | .__/ |_| \___| (_) +# |_| +# !!! This is an example! You will need to modify it for your specific +# !!! requirements! + # Start by allowing everything (this prevents the rest of the file # from working, so remove it when you need protection). @@ -39,6 +46,7 @@ exim : .evil.cracker.example.com : deny exim : ALL : allow # Portmapper is used for all RPC services; protect your NFS! +# (IP addresses rather than hostnames *MUST* be used here) portmap : localhost : allow portmap : .nice.guy.example.com : allow portmap : .evil.cracker.example.com : deny