hosts.allow

yoda123 · 17th February 2005, 1:59 AM

Heyas, not sure if your going to understand this, but try and stick with me, I have pretty limited knowledge with this stuff

anyway, I have this line of code:

Code:

smtp : 127.0.0.1 : deny
smtp : ip.address.that.i.dont.like : deny
smtp : ip.address.that.i.dont.like : deny
smtp : ALL : allow

which works FINE !

now what I am trying to do, is implement it on a further basis, but with ports, specificly port 10000, something like this:

Code:

10000 : 127.0.0.1 : allow
10000 : ip.address.that.i.dont.like : deny
10000 : ip.address.that.i.dont.like : deny
10000 : ALL : allow

Is it possible to specify ports through the use of this file ? As I said - I have limited knowledge, so go easy on me please !

Cheers,
Adam

the-enigma · 17th February 2005, 7:47 AM

Limiting ports like that only works for inetd-started programs, IIRC.
In other words, if the program that listens on port 10000 is always running, then no, that won't stop anything. You'll have to set up the program itself to not listen to that IP address.

This is just a guess by the way, I can be wrong.

17th February 2005, 1:59 AM	#1
yoda123 Member Join Date: Apr 2003 Location: QLD Posts: 2,648	hosts.allow Heyas, not sure if your going to understand this, but try and stick with me, I have pretty limited knowledge with this stuff anyway, I have this line of code: Code: smtp : 127.0.0.1 : deny smtp : ip.address.that.i.dont.like : deny smtp : ip.address.that.i.dont.like : deny smtp : ALL : allow which works FINE ! now what I am trying to do, is implement it on a further basis, but with ports, specificly port 10000, something like this: Code: 10000 : 127.0.0.1 : allow 10000 : ip.address.that.i.dont.like : deny 10000 : ip.address.that.i.dont.like : deny 10000 : ALL : allow Is it possible to specify ports through the use of this file ? As I said - I have limited knowledge, so go easy on me please ! Cheers, Adam

17th February 2005, 7:47 AM	#2
the-enigma Member Join Date: Mar 2002 Location: BrisVegas Posts: 1,734	Limiting ports like that only works for inetd-started programs, IIRC. In other words, if the program that listens on port 10000 is always running, then no, that won't stop anything. You'll have to set up the program itself to not listen to that IP address. This is just a guess by the way, I can be wrong.