...

...

Solution: Get yourself a static name for your dynamic IP.

Is that available from all providers? Martin

www.dyndns.org

Ah, but unless I'm mistaken, tcp wrappers does a reverse lookup of the requesting ip before a lookup of the dynamic dns hostname. I.E. you have foo.dyndns.org, which points to 1.2.3.4. You have sshd: foo.dyndns.org : ALLOW in /etc/hosts.allow On login, sshd looks up 1.2.3.4, finds xxx123.foo.your-isp.dialup.com. Denies access. You will see: "sshd[18529]: refused connect from xxx123.foo.your-isp.dialup.com (1.2.3.4)" in your logs. It never looks up the ip for your dyndns hostname. Anyone have more/better info? I have tested this and found the sequence of events to be as I described. Thanks! -gabriel