DenyHosts

 

Home | FAQ | About | Statistics | Links | Features | Download | SourceForge

Testing you SSH configuration

In order to take advantage of DenyHosts, you must ensure that your sshd server has been compiled w/ tcp_wrappers support. On most Linux distros, sshd has been compiled with tcp_wrappers enabled. If you are not sure, a simple test follows:

  1. Login, as root, to your Linux system containing the sshd server.
  2. Edit the file, /etc/hosts.deny
  3. Add the following:
    $ sshd: 127.0.0.1
  4. Save the file
  5. Attempt to connect to the local sshd server:
    $ ssh localhost
  6. You should see the following ssh error message:
    ssh_exchange_identification: Connection closed by remote host


    If the above error message was displayed, then sshd has been compiled with tcp_wrappers

    If your client connects to the sshd server, then your sshd has not been compiled with tcp_wrappers


  7. Edit the file, /etc/hosts.deny
  8. Remove the line that you added earlier (eg. sshd: 127.0.0.1)
  9. Save the file

Home | FAQ | Links | Features | Download | SourceForge
Global Cooling