[NTLUG:Discuss] Hosts.deny working?

[terry]

On Fri, Apr 10, 2009 at 11:27 AM, terry <trryhend at gmail.com> wrote:

>
>
> On Fri, Apr 10, 2009 at 11:14 AM, David Simmons <dave at dgnal.net> wrote:
>
>>
>>
>> Guys,
>>
>> I've been using my /etc/hosts.deny file very thoroughly
>> lately to block access from 'the bad guys'.
>>
>> I have an entry in
>> /etc/hosts.deny:
>>
>> ALL:  217.
>>
>> but I keep seeing
>> IP's in the 217.* range in my /etc/log/http/access_log file trying to
>> access files on my server.  So I think:
>>
>> 1)
>> /etc/hosts.deny  is not working  (I don't have any 217.
>> references in hosts.allow that would supercede)
>>
>> 2)  217.*
>> is making the request, but the /hosts/deny file is stopping it from
>> accessing the file...but making the log entry anyways
>>
>> 3)
>> I'm crazy
>>
>> ......since I can't test from a 217.* IP address - I
>> don't know how I can test to see if things are working?
>>
>
>  tcpdump -i eth#
>
>
tcpdump -i eth# |grep 217.

-- 
<><