Wouter wrote:

I would like to block whit hosts.deny all the pop3 and i will add a few hosts in hosts.allow who are allowed for pop3.

Perhaps you should have sent your hosts.deny entries along with your question. And remember that the first argument in this file is the program name, not the portname.

Is it also poselebel to do this whit iptables ? Can i see if your host ends whit *.ISP.nl you have access tot the pop server ?

No, domain named wildcarding isn't possible with iptables. (You'd have to determine each and every IP which should be allowed. Typically it's your local network and you can define a CIDR network for these hosts.) Peter

Are you sure your POP server was compiled with libwrap support? If not, you can't block with hosts.deny. If I understand correctly, you want to block all connections from outside the Netherlands? You can do that with iptables: From the iptables manpages: Source specification. Address can be either a network name, a hostname (please note that specify­ing any name to be resolved with a remote query such as DNS is a really bad idea) Please also note the BAD idea part: it's possible but not advisable. Same goes for doing it with libwrap: any incoming connection would have to be resolved first. That could take seconds if the DNS connection is slow: hello gridlock. Or what about addresses that don't resolve back? If you want to block access to your pop server, I suggest you do it with ip-numbers, and preferably include-style, that is block all and only allow those that you want to. HTH Stefan On Monday 27 January 2003 16:55, Wouter wrote:

Hi,

I try to black al the incoming conecctions to pop3 in hosts.deny. Only it dont works... When i try it whit ssh there is no problem.

I would like to block whit hosts.deny all the pop3 and i will add a few hosts in hosts.allow who are allowed for pop3.

Is it also poselebel to do this whit iptables ? Can i see if your host ends whit *.ISP.nl you have access tot the pop server ?

Greets Wouter