I just retested on FC3. The ssh that comes with the standard repos does honor the /etc/hosts.allow and /etc/hosts.deny files. I am not real familiar with the HOSTDENY program, but if it updates /etc/hosts.deny, ssh will honor it. The tcpwrappers program also checks /etc/hosts.deny and /etc/hosts.allow. You can easily test this by hand. Bob Styma
