Use TCP Wrappers to disallow FTP from certain IP?

[nbakewell]

I need to disallow FTP from a certain IP address and am trying to use TCP wrappers to do so. After reading some online articles, I thought it was as simple as adding this line to my hosts.deny file:

vsftpd : 192.168.20.120

And making sure nothing in my hosts.allow file was overriding that, but after doing so and attempting to FTP in from 192.168.20.120 I still have access. Am I missing something here? I also tried changing vsftpd to just ftpd and ftp. How can I deny FTP from just certain IPs using TCP Wrappers?

[falko]

What's in /etc/vsftpd.conf?

[nbakewell]

I believe I got it working now - turns out my 20.120 machine was actually using it's second ethernet card, 30.200, to connect through FTP, so hosts.deny was not blocking it. Now I've added that second IP address and it works.

Just to clarify, this is the method of using TCP wrappers, correct? Or is this not the same?

[falko]

Just to clarify, this is the method of using TCP wrappers, correct?

Yes, that's right.