AllowHosts / DenyHosts

Markus Friedl markus.friedl at informatik.uni-erlangen.de
Wed Feb 28 19:58:52 EST 2001


On Tue, Feb 27, 2001 at 05:41:55PM +0100, Andreas Vetter wrote:
> I'd like to see a feature of the commercial ssh in openssh:
> AllowHosts xxx.yyy.xxx.yyy *.domain.net
> DenyHosts xxx.yyy.xxx.* name.domain.net
> 
> This allows or denies connects from certain machines (including wildcard
> matching).
> 
> Is there any chance for this feature to be included? No, we don't want to
> use tcp-wrapper for this.

why should every feature, even if there exist special solutions,
included in openssh? you can deny ip-addresses with tcp-wrapper,
ipfw, ipf, etc, etc.





More information about the openssh-unix-dev mailing list