On 17/12/2007, Tom Horsley <tom.horsley@xxxxxxx> wrote: > On Tue, 18 Dec 2007 08:05:04 +0900 > John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote: > > > I don't see that tcpwrappers does a lot for you in this case than you > > can also do with iptables. > > Sure it does: It achieves exactly what I want, and doesn't require > yet another daemon to be running with yet another obscure > command language to learn :-). (The hosts.allow syntax is only > about 1/10th as obscure as the iptables commands). There's nothing wrong with the hosts.allow approach, but do note that using the iptables approach doesn't require yet another daemon to be running.