diff options
| author | Ruslan Ermilov <ru@FreeBSD.org> | 2006-08-29 09:20:48 +0000 |
|---|---|---|
| committer | Ruslan Ermilov <ru@FreeBSD.org> | 2006-08-29 09:20:48 +0000 |
| commit | 98374c9c79030ed48f90b2c7c65c023babf56ee5 (patch) | |
| tree | e0a99f1be0acf46eb10c27b57005897d58bbb499 /etc/hosts.allow | |
| parent | 129518b229934710d0229349d4d99e1804e0e92e (diff) | |
Notes
Diffstat (limited to 'etc/hosts.allow')
| -rw-r--r-- | etc/hosts.allow | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/etc/hosts.allow b/etc/hosts.allow index 054ea2df67426..96e0b67aba110 100644 --- a/etc/hosts.allow +++ b/etc/hosts.allow @@ -39,43 +39,43 @@ ALL : PARANOID : RFC931 20 : deny ALL : localhost 127.0.0.1 : allow # Comment out next line if you build libwrap without IPv6 support. ALL : [::1] : allow -ALL : my.machine.example.com 192.0.2.35 : allow +#ALL : my.machine.example.com 192.0.2.35 : allow # To use IPv6 addresses you must enclose them in []'s -ALL : [fe80::%fxp0]/10 : allow -ALL : [fe80::]/10 : deny -ALL : [2001:db8:2:1:2:3:4:3fe1] : deny -ALL : [2001:db8:2:1::]/64 : allow +#ALL : [fe80::%fxp0]/10 : allow +#ALL : [fe80::]/10 : deny +#ALL : [2001:db8:2:1:2:3:4:3fe1] : deny +#ALL : [2001:db8:2:1::]/64 : allow # Sendmail can help protect you against spammers and relay-rapers sendmail : localhost : allow -sendmail : .nice.guy.example.com : allow -sendmail : .evil.cracker.example.com : deny +#sendmail : .nice.guy.example.com : allow +#sendmail : .evil.cracker.example.com : deny sendmail : ALL : allow # Exim is an alternative to sendmail, available in the ports tree exim : localhost : allow -exim : .nice.guy.example.com : allow -exim : .evil.cracker.example.com : deny +#exim : .nice.guy.example.com : allow +#exim : .evil.cracker.example.com : deny exim : ALL : allow # Rpcbind is used for all RPC services; protect your NFS! # (IP addresses rather than hostnames *MUST* be used here) -rpcbind : 192.0.2.32/255.255.255.224 : allow -rpcbind : 192.0.2.96/255.255.255.224 : allow +#rpcbind : 192.0.2.32/255.255.255.224 : allow +#rpcbind : 192.0.2.96/255.255.255.224 : allow rpcbind : ALL : deny # NIS master server. Only local nets should have access # (Since this is an RPC service, rpcbind needs to be considered) ypserv : localhost : allow -ypserv : .unsafe.my.net.example.com : deny -ypserv : .my.net.example.com : allow +#ypserv : .unsafe.my.net.example.com : deny +#ypserv : .my.net.example.com : allow ypserv : ALL : deny # Provide a small amount of protection for ftpd ftpd : localhost : allow -ftpd : .nice.guy.example.com : allow -ftpd : .evil.cracker.example.com : deny +#ftpd : .nice.guy.example.com : allow +#ftpd : .evil.cracker.example.com : deny ftpd : ALL : allow # You need to be clever with finger; do _not_ backfinger!! You can easily |