Can I use TCP wrappers for added security on Secure Shell?
Yes, the Secure Shell daemon can use TCP wrappers. Unlike other tcpwrapped services, the Secure Shell daemon is NOT run via inetd and tcpd (doing that will give “packet too long” errors). TCP wrapper support (also called “libwrap support”) is compiled into the sshd binary and the sshd runs as a standalone daemon. To build Secure Shell with libwrap support, run ./configure with the –with-libwrap=PATH flag, where PATH is the full pathname to the libwrap.a file that you installed when you built the TCP wrappers.