about add tcpwrapper in SSHD

Hi,

In order to add tcpwrapper function to sshd daemon, can I add tcpwrapper
in sshd by create one file in /etc/xinetd.d/sshd, just like the build in
in.ftp config file in xined.d.

Or I have to compile libwrap to sshd ?

thanks

-- Daniel

On Mon, 1 Nov 2004 17:03:08 -0500, Daniel Huang wrote:
> Hi,
>
> In order to add tcpwrapper function to sshd daemon, can I add tcpwrapper
> in sshd by create one file in /etc/xinetd.d/sshd, just like the build in
> in.ftp config file in xined.d.

on my distro I can use xined.d and/or /etc/hosts.allow/deny
No other work required.

You may want to read http://www.catb.org/~esr/faqs/smart-questions.html
Always provide your distro and release level when posting questions.
Might help get you better answers.

In message <cm6bqs$4k9l$1@netnews.upenn.edu>, Daniel Huang
<danielhuang@hotmail.com> writes
>Hi,
>
>In order to add tcpwrapper function to sshd daemon, can I add tcpwrapper
>in sshd by create one file in /etc/xinetd.d/sshd, just like the build in
>in.ftp config file in xined.d.
>
>Or I have to compile libwrap to sshd ?
>
Possibly. It's done by default in Debian. Which distro do you use? It's
worth just trying lines in hosts.allow and .deny to see if it's done
already.
--
Joe

I search a while on Google, it could be done but not recommended.

As sshd need to generate key for each new connection and put a frequent
request on xinetd will has huge over head.

Suggesting use the libwrap build in.

"Joe" <joe@jretrading.com> wrote in message
news:plb5tICCn8hBFwRm@jretrading.com...
> In message <cm6bqs$4k9l$1@netnews.upenn.edu>, Daniel Huang
> <danielhuang@hotmail.com> writes
>>Hi,
>>
>>In order to add tcpwrapper function to sshd daemon, can I add tcpwrapper
>>in sshd by create one file in /etc/xinetd.d/sshd, just like the build in
>>in.ftp config file in xined.d.
>>
>>Or I have to compile libwrap to sshd ?
>>
> Possibly. It's done by default in Debian. Which distro do you use? It's
> worth just trying lines in hosts.allow and .deny to see if it's done
> already.
> --
> Joe

On 2004-11-02, Daniel Huang <danielhuang@hotmail.com> wrote:

> I search a while on Google, it could be done but not recommended.

I've used both methods, and both work fine.

> As sshd need to generate key for each new connection and put a frequent
> request on xinetd will has huge over head.

I never heard him wimper yet ;)

> Suggesting use the libwrap build in.

Building it in is a compile-time switch, if you use the sources. If it's a
package, you're at the mercy of the package maintainer.

If yours has it, use it, if not, xinetd's will suit.

--
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++