Portsentry trouble

[Harvey]

Hey guys, how do I *Unblock* someone who has been dropped by portsenty?

I tried taking their ip out of /etc/hosts.deny, but that didn't work... also, I tried adding them to /etc/hosts.allow, and I still couldn't access the webserver from that IP.

Strange. It's slackware btw. Any ideas?

Is there some service that needs to be restarted to re-read /etc/hosts.deny?

[Harvey]

Hey I did some more web surfing, and found advice that I should do the opposite of the command portsentry runs to drop the offending host.

The command it runs is....
KILL_ROUTE="/sbin/route add -host $TARGET$ reject"

that's from portsentry.conf

I tried...

root@localhost:/usr/local/psionic/portsentry# /sbin/route del -host 12.2.43.225 accept
SIOCDELRT: No such device
root@localhost:/usr/local/psionic/portsentry# /sbin/route del -host 12.2.43.225 reject
SIOCDELRT: No such process

but as you can see, i'm getting errors.

At least I know I'm secure huh. How the heck do I undo this though? weird.

[Harvey]

FIXED IT MY GODD THAT was annoying!

root@localhost:/usr/local/psionic/portsentry# /sbin/route del -host xx.xx.xx.xx reject

xx is the ip addy. dang.

[spickus]

Edit /usr/local/psionic/portsentry/portsentry.blocked.*udp & *tcp.