sshd and alternative to tcp_wrappers

[jiml8]

I see that openssh is no longer compiled against libwrap.so.

Losing tcp wrappers has caused part of my system to break. I run blockhosts to guard open ports (especially ssh) and it depends on tcp wrappers to launch it when appropriate traffic comes through.

Lacking that, I have made blockhosts into a cron that runs every 5 minutes. This is better than nothing, but is still sub-optimal.

I do not think that sshd can be configured to execute a command upon a failed login attempt, though it can be configured to dl a lot of things upon a successful login.

So. Either (1) does anyone here have an idea about how I can make this work better or (2) is it perhaps an error that openssh is no longer using libwrap.so? That library is still provided with the system.