Questions tagged [denyhosts]

DenyHosts is a log-based intrusion prevention security tool for SSH servers written in Python. It identifies brute force attacks and bans access using tcp_wrappers, and in recent versions iptables.

Filter by
Sorted by
Tagged with
0 votes
1 answer
195 views

tcpd, inetd/rinetd and iptables

What is the correlation between these programs? tcpd and inted/rinetd are very old but despite this they are still present in many distributions ... why? And there is also a correlation between hosts....
user avatar
3 votes
1 answer
1k views

Is it safe to delete the file /etc/hosts.deny?

I installed Denyhosts and then my permanent ip was partially blocked for some reason ("partially" blocked because while I couldn't ssh or ftp, I was able to http into my sites). I deleted Denyhosts ...
user avatar
2 votes
1 answer
95 views

Can't SSH from my IP, but can from other IPs

I installed DenyHosts, which is a script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks). It did ...
user avatar
2 votes
0 answers
226 views

Why is denyhosts not banning *some* brute force root SSH login attempts?

I recently noticed in my logwatch emails from a couple of servers that although denyhosts was doing its job for some brute force root ssh login attempts others seem to be ignored and continue to ...
user avatar
  • 582
1 vote
1 answer
4k views

Block a certain URL?

I want to deny access to a specific URL. It isn't a whole website, it's a specific URL. I want to do it simply so that some applications including browsers can't make requests for it. I tried this: $ ...
user avatar
  • 2,471
0 votes
2 answers
310 views

How can I reduce the volume of DenyHosts emails?

As someone who had no experience dealing with Unix or Linux before about 6 months ago, I'm feeling pretty comfortable with managing a Linux server now. The one question I do have is about DenyHosts, ...
user avatar
1 vote
2 answers
2k views

Does dropbear take care of hosts.allow and hosts.deny?

I'm running dropbear as SSH daemon on Debian (actually Raspbian). I tried setting # /etc/hosts.allow dropbear:192.168.1.1 # my static ip from which I SSH connect to the device and # /etc/hosts.deny ...
user avatar
  • 3,242
0 votes
2 answers
2k views

Can't use SSH anymore after installing denyhosts

so I'm in a very tricky situation. I've installed denyhosts on my debian machine and suddenly I can't use SSH anymore. Hopefully I could still login through webmin, but with root, so I had to login ...
user avatar
1 vote
2 answers
2k views

Denyhosts: how to always allow certain known users?

With Denyhosts, how can I "whitelist" a known good user by username plus the fact that they have a valid RSA keypair (or in combination with some other known fact about the user such as MAC address)? ...
user avatar
  • 15.4k
0 votes
1 answer
189 views

Restricting web application access to selected machines

I want to host a web based OpenERP application in a VPS Ubuntu 12.04 OS application. Can I restrict the application access to only assigned machines? In other words, I have 2 offices, and I need to ...
user avatar
  • 1
1 vote
0 answers
163 views

Cygwin DenyHosts daemon-control file: no such file or directory error

I have been trying to figure out this error and searched everywhere with no luck. I have installed DenyHosts on Cygwin and also the DenyHosts daemon but when I try to start the daemon by typing: ...
user avatar
  • 143
2 votes
3 answers
1k views

denyhosts is blocking existing users from logging in from unknown (new) IP addresses

I have denyhosts set up and working on Ubuntu 12.04. It apparently works well, except it is too strict. I can log in from any IP address that I have added to hosts.allow in advance. My sshd_config ...
user avatar
  • 15.4k
0 votes
2 answers
257 views

DenyHosts and no-ip.com

I recently installed DenyHosts and after a few remote logins I noticed that sshd: 8.23.224.110 had been added to the host.deny file after /var/log/auth.log showed a few sshd: Did not receive ...
user avatar
  • 677
0 votes
1 answer
389 views

Local host always being added to /etc/hosts.deny when trying to SSH

I have a rather odd problem with my server. For some reason the local hostname for my workstation keeps getting added to the /etc/hosts.deny and when I try to SSH I get: ssh_exchange_identification: ...
user avatar