P Kidd wrote:
> hosts.allow (SSHD: externalip/32 : ALLOW)
this entry is redundant
> does ipchains block the "telnet" port?
I guess so as when I inserted the following line port 23 external access works, but is this ipchains insertion OK? Port 22 accepts any ip address, and if I just Append the following, external access is blocked so it seems OK to me

ipchains -I input -p tcp -s externalip/32 --dport 23 -i eth1 -j ACCEPT