Restricting ssh

[Roger K. Wells]

On 01/07/2011 10:49 AM, Mike Zingale wrote:
> 2011/1/7 Markus Schönhaber<fedora-users at list-post.mks-mail.de>:
>> 07.01.2011 00:28, Timothy Murphy:
>>
>>> I have an sshd server running on a machine in Ireland.
>>>
>>> Can I configure it so that it only accepts connection
>>> from certain machines, wherever they may be in the world?
> I uses /etc/hosts.deny and /etc/hosts.allow to do this.  In
> /etc/hosts.deny I have
>
> ALL:ALL
>
> (though, you might want it to just be sshd: ALL).
>
> Then in hosts.allow, I have a line like
>
> sshd: .domain.com
>
> for each of the domains or machines I want to grant access.  This
> seems to work well.
a variation on the theme:
in
/etc/hosts/allow
the line
ALL:LOCAL /etc/hosts

will limit access to the contents of the hosts file


-- 
Roger Wells, P.E.
SAIC
221 Third St
Newport, RI 02840
401-847-4210 (voice)
401-849-1585 (fax)
roger.k.wells at saic.com