d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means

Browse Source 
to tcp wrappers. The description is a little long, but hopefully
accurate.
This commit is contained in:
dwmalone 2001-08-18 14:22:52 +00:00
parent cfa5d0ff52
commit 4449dfd727
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/hosts.allow
View File

@ -26,7 +26,12 @@ ALL : ALL : allow
# need to do it, here's how
#sshd : .evil.cracker.example.com : deny
# Provide some protection against clients using a forged source IP address
# Protect against simple DNS spoofing attacks by checking that the
# forward and reverse records for the remote host match. If a mismatch
# occurs, access is denied, and any positive ident response within
# 20 seconds is logged. No protection is afforded against DNS poisoning,
# IP spoofing or more complicated attacks. Hosts with no reverse DNS
# pass this rule.
ALL : PARANOID : RFC931 20 : deny
# Allow anything from localhost. Note that an IP address (not a host