- markus@cvs.openbsd.org 2001/03/28 20:50:45

     [sshd.c]
     call refuse() before close(); from olemx@ans.pl

diff --git a/ChangeLog b/ChangeLog
index f7d4e740498aec35e880c7e9d62860f6774377a8..073c5ed416e1f4ba34e42bbabe75e5d119e68fff 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -26,6 +26,9 @@
    - stevesk@cvs.openbsd.org 2001/03/28 20:04:38
      [scp.c]
      usage more like rcp and add missing -B to usage; ok markus@
+   - markus@cvs.openbsd.org 2001/03/28 20:50:45
+     [sshd.c]
+     call refuse() before close(); from olemx@ans.pl
 
 20010328
  - (djm) Reorder tests and library inclusion for Krb4/AFS to try to 

diff --git a/sshd.c b/sshd.c
index 65cb832d43a0cfaaad9885097894ed106d4bf60d..27da6e48dbb74641434b4912e30253bf1146ebae 100644 (file)
--- a/sshd.c
+++ b/sshd.c
@@ -40,7 +40,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: sshd.c,v 1.181 2001/03/27 17:46:49 provos Exp $");
+RCSID("$OpenBSD: sshd.c,v 1.182 2001/03/28 20:50:45 markus Exp $");
 
 #include <openssl/dh.h>
 #include <openssl/bn.h>
@@ -1099,9 +1099,9 @@ main(int ac, char **av)
                fromhost(&req);
 
                if (!hosts_access(&req)) {
+                       refuse(&req);
                        close(sock_in);
                        close(sock_out);
-                       refuse(&req);
                }
 /*XXX IPv6 verbose("Connection from %.500s port %d", eval_client(&req), remote_port); */
        }