Eugene Smiley on 11 Nov 2003 09:05:03 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Xvnc login howto


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eugene Smiley wrote:
> Michael F. Robbins wrote:
>>Check /etc/hosts.allow and /etc/hosts.deny.  As you said, access to
>>localhost works fine, so you might just be blocking other hosts.
>
> It would seem that in spite of setting host.allow to "ALL:192.168.1."
> that Mandrakes default host.deny was overriding it since it had an
> EXCEPT clause. ("ALL:ALL EXCEPT 127.:DENY") once I changed it to
> "ALL:ALL EXCEPT 127., 192.168.1.:DENY" everything worked.
>
> Now, I am finding that Mandrake is automatically modifying host.deny
> to append "ALL:ALL EXCEPT 127.:DENY". Anyone know where this is coming
> from so that I can shut it off?

I managed to track it down to a Mandrake security application called
msec. When I installed Mandrake it gave a description of the security
levels that was lacking on details, but when I set the level to its
lowest (poor) the appends to host.deny stopped.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-nr2 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/sOyH6QPtAqft/S8RAqMSAKDTsgI7zqN2pdeLMzuhiix5BqdolgCg9/ui
hyW1NN+fmSVVdSvCo7FNPbI=
=S4i+
-----END PGP SIGNATURE-----

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug