[NTLUG:Discuss] Hosts.deny working?

[terry]

On Fri, Apr 10, 2009 at 11:14 AM, David Simmons <dave at dgnal.net> wrote:

>
>
> Guys,
>
> I've been using my /etc/hosts.deny file very thoroughly
> lately to block access from 'the bad guys'.
>
> I have an entry in
> /etc/hosts.deny:
>
> ALL:  217.
>
> but I keep seeing
> IP's in the 217.* range in my /etc/log/http/access_log file trying to
> access files on my server.  So I think:
>
> 1)
> /etc/hosts.deny  is not working  (I don't have any 217.
> references in hosts.allow that would supercede)
>
> 2)  217.*
> is making the request, but the /hosts/deny file is stopping it from
> accessing the file...but making the log entry anyways
>
> 3)
> I'm crazy
>
> ......since I can't test from a 217.* IP address - I
> don't know how I can test to see if things are working?
>

 tcpdump -i eth#