[SSHd] Limiting access from authorized IP's

[Paul Schmehl]

--On Saturday, April 19, 2008 00:12:41 +0200 Gilles <gilles.ganault at free.fr> 
wrote:

> On Fri, 18 Apr 2008 10:04:37 +0100, FreeBSD - Wire Consulting
> <freebsd at wire-consulting.com> wrote:
> (snip)
>
> Seems like I didn't do it right:
>
> /etc/ssh/sshd_config:
> [...]
> AllowHosts 192.168.0 82.227.x.x
>
># /etc/rc.d/sshd restart
> Stopping sshd.
> Starting sshd.
> /etc/ssh/sshd_config: line 119: Bad configuration option: AllowHosts
> /etc/ssh/sshd_config: terminating, 1 bad configuration options
>

I don't see an "AllowHosts" option in man (5) sshd_config.  There's 
AllowGroups, AllowTcpForwarding, AllowUsers, but no AllowHosts.

If you want to restrict sshd logins by host, you can use AllowUsers like this:

AllowUsers user1 at host1 user1 at host2 user1 at host3 user2 at host1 user2 at host6

etc., etc.  The list is space-separated on a single line.

-- 
Paul Schmehl (pauls at utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/