Are you sure your POP server was compiled with libwrap support? If not, you can't block with hosts.deny. If I understand correctly, you want to block all connections from outside the Netherlands? You can do that with iptables: From the iptables manpages: Source specification. Address can be either a network name, a hostname (please note that specifying any name to be resolved with a remote query such as DNS is a really bad idea) Please also note the BAD idea part: it's possible but not advisable. Same goes for doing it with libwrap: any incoming connection would have to be resolved first. That could take seconds if the DNS connection is slow: hello gridlock. Or what about addresses that don't resolve back? If you want to block access to your pop server, I suggest you do it with ip-numbers, and preferably include-style, that is block all and only allow those that you want to. HTH Stefan On Monday 27 January 2003 16:55, Wouter wrote:
Hi,
I try to black al the incoming conecctions to pop3 in hosts.deny. Only it dont works... When i try it whit ssh there is no problem.
I would like to block whit hosts.deny all the pop3 and i will add a few hosts in hosts.allow who are allowed for pop3.
Is it also poselebel to do this whit iptables ? Can i see if your host ends whit *.ISP.nl you have access tot the pop server ?
Greets Wouter