sshd and alternative to tcp_wrappers
Posted: Dec 24th, '19, 10:46I see that openssh is no longer compiled against libwrap.so.
Losing tcp wrappers has caused part of my system to break. I run blockhosts to guard open ports (especially ssh) and it depends on tcp wrappers to launch it when appropriate traffic comes through.
Lacking that, I have made blockhosts into a cron that runs every 5 minutes. This is better than nothing, but is still sub-optimal.
I do not think that sshd can be configured to execute a command upon a failed login attempt, though it can be configured to dl a lot of things upon a successful login.
So. Either (1) does anyone here have an idea about how I can make this work better or (2) is it perhaps an error that openssh is no longer using libwrap.so? That library is still provided with the system.
Losing tcp wrappers has caused part of my system to break. I run blockhosts to guard open ports (especially ssh) and it depends on tcp wrappers to launch it when appropriate traffic comes through.
Lacking that, I have made blockhosts into a cron that runs every 5 minutes. This is better than nothing, but is still sub-optimal.
I do not think that sshd can be configured to execute a command upon a failed login attempt, though it can be configured to dl a lot of things upon a successful login.
So. Either (1) does anyone here have an idea about how I can make this work better or (2) is it perhaps an error that openssh is no longer using libwrap.so? That library is still provided with the system.