Re: sshd : hosts.allow

From: Koh-ichi Oniuda ($B54@8ED9@0l(B) <oniuda_at_oni.gr.jp>
Date: Mon, 26 Feb 2024 04:53:41 UTC
$B54@8ED$G$9!#(B

$B!!(Bftpd$B$O!"F1$85-=R$GLdBj$J$$$N$G!">.Ln$5$s$N>pJs$K=>$$(Bsshd$B$b(Binetd
$B7PM3$G%"%/%;%9$9$k$h$&$KJQ99$7!"$d$j$?$$$3$H$O<B8=$G$-$^$7$?!#(B
$B>pJsDs6!$"$j$,$H$&$4$6$$$^$7$?!#(B

$B0J2<%$%s%i%$%s$G$b$&>/$7$@$1(B.

In <20240222185658.2cb68ae90dd226a7f1943169@dec.sakura.ne.jp>
 at Thu, 22 Feb 2024 18:56:58 +0900
Re:[ Re: sshd : hosts.allow ]
 Tomoaki AOKI <junchoon@dec.sakura.ne.jp> wrotes:
junchoon> $B@DLZ(B@$BL>8E20$G$9!#(B
junchoon> 
junchoon> $B<+J,$G$O(Bservice$B$rDs6!$9$k$h$&$JMQES$K;H$C$F$$$J$$$N$G30$7$F$$$k(B
junchoon> $B$+$b$7$l$^$;$s$,!">I>uE*$K$O8GDj$N%]!<%H$r0.$j$C$Q$J$7$K$5$l$F$$$k(B
junchoon> $B$h$&$J46$8$G$9$M!#!!$=$l$,(Bsshd$B$J$N$+(Btcpd$B$J$N$+(Bmail$B$J$N$+$ODI$$(B
junchoon> $B$-$l$F$$$^$;$s$,!#(B

$B!!(B2$BHVL\$N(BSSH$B@\B38e!"%W%m%s%W%HI=<(A0$K!"%a!<%k$OE~Ce$7$F$$$^$9$N$G(B
sshd$B$N!"(B/usr/bin/mail$B%3%^%s%I$r(Bspwn $B$7$?8e$N=hM}$,$^$:$$$h$&$K;W$$$^$9!#(B
$B%a!<%kE~Ce8e$O!"EvA3$N$3$H$J$,$i!"(Bps $B%3%^%s%I$G$b(B /usr/bin/mail $B%3%^%s%I(B
$B$O!"3NG'$G$-$^$;$s!#(Bsshd$BFbIt=hM}$G(Bspawn$B8e$K;I$5$k$h$&$G$9!#(B

$B!!$5$i$K!"BT$A>uBV$N(Bslogin $B$rCf;_(B(Ctrl-C))$B$9$k$H!"(Bsshd$B$N:F5/F0$r$G$-$J$/(B
$B$J$j(B(/etc/rc.d/sshd restart)$B!"(Bkill -9$B$9$k$3$H$K$J$j$^$7$?!#(B

junchoon> $B%3%M%/%7%g%s$,D%$i$l$k$H<uIUMQ$K(Bsshd$B$,(Blisten$B$7$F$$$k%]!<%H!J%G%U%)%k%H(B
junchoon> $B$+$iJQ99$5$l$F$$$k$+$b$7$l$J$$$N$G!K$rGSB>$G%m%C%/$7$F$7$^$&$h$&$J(B
junchoon> $B@_Dj$K$J$C$F$$$k$+F1;~@\B3?t$r(Bsshd1$B$D$"$?$j(B1$B7o$K8BDj$7$F$$$k$N$+!#(B
junchoon> $B!J0JA0$OJ#?t<u$1IU$1$k$h$&$K$J$C$F$$$?$N$,JQ99!)!K(B
junchoon> 
junchoon> inetd$B7PM3$J$iBg>fIW$H$$$&;vNc$,$"$k$H$J$k$H!"5-210c$$$G$J$1$l$P(B
junchoon> sshd$B<+BN$O>o;~5/F0$7$F$O$*$i$:!"(Bsshd$B$,(Blisten$B$9$Y$-%]!<%H$X$N(B
junchoon> $B%"%/%;%9$,Mh$?;~E@$G!V$=$3$r%b%K%?$7$F$$$k!W(Binetd$B$,(Bsshd$B$r5/F0$9$k(B
junchoon> $BN.$l$K$J$k$N$G!"GSB>@_Dj$G$-$J$/$J$C$F7k2LE*$K2sHr$5$l$F$$$k$H$$$&(B
junchoon> $B>u67$,$"$j$=$&$J5$$,$7$^$9!#(B

 spawn$B$J$7$G!"(Ballow $B$N>l9g$O!"LdBj$J$/F1;~%"%/%;%92DG=$J$N$GGSB>@)8fE*$J$b$N(B
$B$G$O$J$$$h$&$G$9!#(B

junchoon> $BB?>/$J$j$H860x@Z$jJ,$1$N%R%s%H$K$G$b$J$l$P!#(B

$BBgJQ;29M$K$J$j$^$7$?!#>pJsDs6!$"$j$,$H$&$4$6$$$^$9!#(B

junchoon> On Thu, 22 Feb 2024 15:21:43 +0900
junchoon> Hiroo Ono <hiroo@oikumene.net> wrote:
junchoon> 
junchoon> > On Thu, 22 Feb 2024 14:44:57 +0900
junchoon> > $B54@8ED9@0l(B <oniuda@oni.gr.jp> wrote:
junchoon> > 
junchoon> > $B>.Ln42@8$G$9!#(B
junchoon> > 
junchoon> > https://forums.freebsd.org/threads/freebsd-13-2-openssh-9-3-1-connection-limit.88891/
junchoon> > $B$G$O(B 13.2-RELEASE $B$GF1$88=>]$,8+$i$l$F$$$k$=$&$G!":,K\860x$OJ,$+$i$J$$$b$N$N!"(Bsshd $B$r(B inetd $B$+$i(B
junchoon> > $B5/F0$9$k$h$&$K$7$?$i$H$j$"$($:2sHr$G$-$k$H=q$+$l$F$$$^$9!#(B
junchoon> > $B$"$H!"30$7$F$$$k$H$O;W$$$^$9$,!"(Bsshd $B$N%k!<%k$N(B3$B9TL\$rIU$1B-$7$?$i$I$&$J$j$^$9$+(B?

$B!!$3$A$i$b;n$7$F$_$^$7$?$,!";DG0$J$,$i(Bspawn$B$r=hM}$7$?8e!"BT$A>uBV$H$J$j$^$7$?!#(B

junchoon> > > $B54@8ED$G$9!#(B
junchoon> > > 
junchoon> > > 14.0-RELEASE-p3$B%5!<%P$r?75,9=C[Cf$G$9$,!"(B/etc/hosts.allow$B$,2a5n%P!<%8%g%s$N(B
junchoon> > > $B;~$HF0:n$,0[$J$j$^$9!#(B
junchoon> > > 
junchoon> > > sshd: 192.168. : allow
junchoon> > > sshd: .example.jp  \
junchoon> > >         : spawn (echo %d. | \
junchoon> > >          /usr/bin/mail -s "tcpd\: %d-form-%u@%h[%a]!" root) & \
junchoon> > >         : allow
junchoon> > > 
junchoon> > > 192.168.X.Y$B$+$i$N(BSSH$B%"%/%;%9$O!"LdBj$"$j$^$;$s$,(B
junchoon> > > .example.jp $B$+$i$N(BSSH$B%"%/%;%9$O!"(B2$B@\B3L\$,BT$A>uBV$H$J$j$^$9!#(B
junchoon> > > 2$B@\B3L\$N%"%/%;%9$r<($9%a!<%k$OFO$-$^$9!#(B1$BHVL\$N@\B3$r=*N;$9(B
junchoon> > > $B$k$H%m%0%$%s%W%m%;%9$X0\9T$7$^$9!#(B($B%W%m%s%W%HI=<((B)
junchoon> > > 
junchoon> > > google$B8!:w$G!"0J2<$N%Z!<%8$,%R%C%H$7!"F1$88=>]$N$h$&$G$9!#(B
junchoon> > > https://www.space-i.jp/wp/?m=glduoruwccke
junchoon> > > 
junchoon> > > ftpd : $B$G$O>e5-(Bhosts.allow$B$N5-=R$G=>Mh$HF1$8F0:n$r$7$F$/$l$^$9!#(B
junchoon> > > $B$3$N8=>](B($B;EMM!)(B)$B$N!">pJs$*;}$A$NJ}$*$i$l$^$7$?$i!"$465<($/$@$5$$!#(B

---
Oniuda