Thread: Denyhosts/sshd compatibility issue (?)

on website denyhosts project at: http://denyhosts.sourceforge.net/ssh_config.html

html code:

testing ssh configuration  in order take advantage of denyhosts, must ensure sshd server has been compiled w/ tcp_wrappers support. on linux distros, sshd has been compiled tcp_wrappers enabled. if not sure, simple test follows:       1. login, root, linux system containing sshd server.     2. edit file, /etc/hosts.deny     3. add following:        $ sshd: 127.0.0.1     4. save file     5. attempt connect local sshd server:        $ ssh localhost     6. should see following ssh error message:        ssh_exchange_identification: connection closed remote host          if above error message displayed, sshd has been compiled tcp_wrappers          if client connects sshd server, sshd has not been compiled tcp_wrappers       7. edit file, /etc/hosts.deny     8. remove line added earlier (eg. sshd: 127.0.0.1)     9. save file

according sshd server (openssh_5.1p1 debian-5ubuntu1) not benefit using denyhosts. after testing have found denyhosts repositories not functioning advertised either.

how all?

that package depends on tcpd , support tcpd in openssh-server

put in tcpd's /etc/hosts.deny test:

sshd: 127.0.0.0/8

stop ssh server , re-start one-off session in debug mode:

/etc/init.d/ssh stop
/usr/sbin/sshd -dd

in window try connect. go sshd window , read output. sshd stop once connection closed , you'll have run again each test.

should see this:

debug1: connection refused tcp wrapper

note of above done on same machine.

ps. works me openssh_5.1p1 debian-6ubuntu1, openssl 0.9.8g 19 oct 2007 on karmic beta on amd64.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [all variants] Denyhosts/sshd compatibility issue (?)

Ubuntu