On Wed, Jul 28, 2010 at 12:15 PM, gm5729 <
gm5729@gmail.com> wrote:
>>
>> it is a good idea to put yourself in hosts.allow before adding
>> anything to hosts.deny.
>>
> That is what /etc/hosts is for if IIRC. I have a domain name I could
> put it in there, but most of the time I just see a digitized IP
> address that is dynamic.
/etc/hosts is for name lookup before DNS gets running.
hosts.allow and hosts.deny perform an ACL function and have a
different file format - see the man page. or your file bellow
you want to witelist yourself (machine/range you work from) in
hosts.allow so you don't lock yourself out of your remote server - and
don't have to walk down the hall and root around in the closet.. ;)
>
> You asked about countries.
> The link you gave was for email. I am not talking about email. I am
> talking about literally blocking whole countries from access. Here is
> my /etc/hosts.deny
>
> #
> # /etc/hosts.deny
> #
>
> ALL:.cn,.eg,.iq,.ir,.jo,.kp,.ly,.sa,.sd,.su,.sy,.za
> ###
>
>
ok , but if you do it that way, a DNS lookup is required by each
contact. That would be too slow for a router, better to use IP blocks
as assigned by IANA & crew.
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)