hosts.allow and hosts.deny

[Mistoffeles]

So what I have is a machine, here are some pretend IPs that sort of work the same:

Server: 192.168.7.5
Router: 192.168.7.1 / 210.12.17.87
Server 1:1 NAT config on router: 192.168.7.5 <-> 210.12.17.91
Laptop: 172.16.87.17 / 210.14.55.110

When I configure my hosts.allow, do I do it like this:

sshd: 210.14.55.110, 192.168.7.11
(laptop's external IP at work, laptop's IP on site at co-loc)
ALL EXCEPT sshd: localhost, 192.168.7.5
(server's own IP within the LAN)

then hosts.deny like this:

ALL: ALL

[meton_magis]

I don't remember (been too long since I used it) but you can probably find what you need by googling "tcpwrappers guide"

I know redhat has a pretty good one.