In four unrelated open-source projects, Anthropic found a configuration flaw where host-based deny rules fail open when reverse DNS lookups are disabled, allowing blocked clients to access the server.