{"id":427,"date":"2017-04-28T13:16:40","date_gmt":"2017-04-28T18:16:40","guid":{"rendered":"http:\/\/www.hpux.ws\/?p=427"},"modified":"2017-04-28T13:16:40","modified_gmt":"2017-04-28T18:16:40","slug":"handle-with-care-tcp-wrappers-etchosts-allow","status":"publish","type":"post","link":"https:\/\/www.hpux.ws\/?p=427","title":{"rendered":"Handle with care: TCP wrappers \/etc\/hosts.allow"},"content":{"rendered":"<p>Real life story.<\/p>\n<p>DMZ based server dedicated to SFTP was configured with sshd rules in \/etc\/hosts.allow<br \/>\nsshd : ALL@16.89.97.*:ALLOW<br \/>\nsshd : ALL@14.251.*:ALLOW<br \/>\nsshd : A<strong>A<\/strong>L@208.94.61.*:ALLOW<\/p>\n<p>Should have been:<\/p>\n<p>sshd : ALL@16.89.97.*:ALLOW<br \/>\nsshd : ALL@14.251.*:ALLOW<br \/>\nsshd : <strong>ALL<\/strong>@208.94.61.*:ALLOW<\/p>\n<p>That network was the firewall to the outside world.<\/p>\n<p>The end users were inconvenienced and the firewall team wasted a lot of time reviewing rues and looking at logs.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Real life story. DMZ based server dedicated to SFTP was configured with sshd rules in \/etc\/hosts.allow sshd : ALL@16.89.97.*:ALLOW sshd : ALL@14.251.*:ALLOW sshd : AAL@208.94.61.*:ALLOW Should have been: sshd : ALL@16.89.97.*:ALLOW sshd : ALL@14.251.*:ALLOW sshd : ALL@208.94.61.*:ALLOW That network was the firewall to the outside world. The end users were inconvenienced and the firewall team [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"_kadence_starter_templates_imported_post":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-427","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.hpux.ws\/index.php?rest_route=\/wp\/v2\/posts\/427"}],"collection":[{"href":"https:\/\/www.hpux.ws\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hpux.ws\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hpux.ws\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hpux.ws\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=427"}],"version-history":[{"count":0,"href":"https:\/\/www.hpux.ws\/index.php?rest_route=\/wp\/v2\/posts\/427\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hpux.ws\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hpux.ws\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hpux.ws\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}