On 22 Apr 2014, at 23:31, James Cloos wrote: >>>>>> "DM" == Damien Miller <djm@xxxxxxxxxxx> writes: > > DM> This is an early warning: OpenSSH will drop tcpwrappers in the next > DM> release. > > This will need a wider announcement. Most auto-block solutions I've > looked at add entries to hosts.allow. +1. Denyhosts suddenly stopping working is not a great plan. Personally I don't want an automated script futzing with iptables, and making it reload sshd.conf does not seem a great plan either. Making things 'fail insecure' does not seem the right thing to do. -- Alex Bligh _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
