6

We want to block all access to SSH, except for two IP addresses. One address is dynamic, it starts with 124.567.890.xxx where xxx is changing all the time. I read that you can do this by changing /etc/hosts.allow? How can we do this?

Improve this question

1 Answer 1

Reset to default
5

This should be as trivial as

sshd : 124.567.890. : allow

Improve this answer
5
  • Thanks, and multiple addresses?
    – Kevin
    Dec 31, 2011 at 10:14
  • 1
    Nvm, found it: sshd: 83.83.83.83 127.0.0.1 83.83.83.84 192.168.1.1
    – Kevin
    Dec 31, 2011 at 10:18
  • 1
    In /etc/hosts.deny, you'll need to put in "sshd: ALL", so your combined rule will be deny all, allow X.
    – cjc
    Dec 31, 2011 at 10:29
  • Thanks, and how can I test the security? We only have one IP address right here.
    – Kevin
    Dec 31, 2011 at 10:33
  • Is this relevant to your question? serverfault.com/questions/185153/…
    – Sergei
    Dec 31, 2011 at 10:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.