Try looking at the man for tcpd (section 8) and hosts_access (section 5). /etc/{hosts.deny,hosts.allow} & tcpwrappers in general are primarily used for services that are a) started from /etc/inetd.conf via tcpd or b) compiled against libwrap (ie, ssh). Port 113 should be wrappable by method [a] (although I don't believe it's wrapped by default); port 6000 is used with X stuff (ie, xdm and the X server). I'm not so sure these are wrappable unless they've been compiled w/ libwrap support and I don't believe they have been. ----- Original Message ----- From: "Anel Hidic [ PatlidzaN ]" To: Sent: 06 February 2000, Sunday 03:54 Subject: [SLE] hosts.deny syntax | I tried to find some manual entry for host.deny but i didn't find any... | can someone tell me syntax of that file... | if i want to close...let us say port 6000 or 113 for ALL remote | users...if it's possible without any problems for system/... | | thank you all | -- | PENGUIN POWER << S u S E L I N U X >> | http://www.linux.ba << The first Linux page in Bosnia >> | http://www.suse.com << The ultimate Linux distribution >> | | -- | To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com | For additional commands send e-mail to suse-linux-e-help@suse.com | Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/ | | -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

Hi Anel, "Anel Hidic [ PatlidzaN ]" wrote:

if i want to close...let us say port 6000 or 113 for ALL remote users...if it's possible without any problems for system/...

If you wanted to block ports 6000 and 113 for all remote users, you can use ipchains: ipchains -I input 1 -d 6000 -j REJECT ipchains -I input 1 -d 113 -j REJECT I used REJECT here instead of DENY so that rather than just disappearing into a black hole, a reply is sent to the connecting user *telling* them that they can't connect. Hope that helps, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\\ /__/ / _ \/ // /\ \/ / ICQ# 22219005 _\_v __/_/_//_/\_,_/ /_/\_\ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/