diff --git a/etc/hosts.allow b/etc/hosts.allow index 5a60d48ba66..ff95ee8b3d7 100644 --- a/etc/hosts.allow +++ b/etc/hosts.allow @@ -26,7 +26,7 @@ ALL : ALL : allow # need to do it, here's how #sshd : .evil.cracker.example.com : deny -# Prevent those with no reverse DNS from connecting. +# Provide some protection against clients using a forged source IP address ALL : PARANOID : RFC931 20 : deny # Allow anything from localhost. Note that an IP address (not a host