On Sun, 2010-04-25 at 06:50 -0700, Craig White wrote:
what? The only scenarios where you don't need something like denyhosts are where only publickey authentication is allowed (no passwords) or the system is not connected to the Internet and cannot be accessed by untrusted users.
You failed to comprehend what I wrote.
Put ALL: ALL in /etc/hosts.deny
Put the IP addresses (and services -- read man hosts.allow for the syntax) that you need to access the box from into /etc/host.allow.
Done.
Again there is no need to run denyhosts on a computer that you access only from specific outside IP addresses.