up vote 1 down vote favorite
share [g+] share [fb]

We want to block all access to SSH, except for two IP addresses. One address is dynamic, it starts with 124.567.890.xxx where xxx is changing all the time. I read that you can do this by changing /etc/hosts.allow? How can we do this?

link|improve this question
feedback

1 Answer

up vote 1 down vote

This should be as trivial as

sshd : 124.567.890. : allow

link|improve this answer
Thanks, and multiple addresses? – Kevin Dec 31 '11 at 10:14
Nvm, found it: sshd: 83.83.83.83 127.0.0.1 83.83.83.84 192.168.1.1 – Kevin Dec 31 '11 at 10:18
1  
In /etc/hosts.deny, you'll need to put in "sshd: ALL", so your combined rule will be deny all, allow X. – cjc Dec 31 '11 at 10:29
Thanks, and how can I test the security? We only have one IP address right here. – Kevin Dec 31 '11 at 10:33
Is this relevant to your question? serverfault.com/questions/185153/… – Sergei Dec 31 '11 at 10:52
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.