I would like to force users into a specific command when they log in from outside my LAN via SSH to my LAN. My idea was, to use
ForceCommand in a
Match conditional block, that matches all addresses except for the ones in my LAN.
I have tried the following, according to
man 5 sshd_config:
Match Address !192.168.1.0/24allowed users from anywhere to execute any command.
Match Address !192.168.*allowed users from anywhere to execute any command.
Match !Address 192.168.*prevented execution of any command by means of
sshdrefusing to start.
Negating a pattern using
! is described in
man 5 ssh_config (Section "Patterns"). How can this be applied to addresses?