Best way to limit SSH to LAN IP's only ?

Alex de Kruijff freebsd at akruijff.dds.nl
Fri Jul 23 05:39:40 PDT 2004


On Fri, Jul 23, 2004 at 01:20:12PM +0100, Graham Bentley wrote:
> 
> Hi All,
> 
> Wondered what is the best way to do this ?
> 
> Do I have to get involved with host.allow / deny
> or better to use the sshd config ?

Hi,

The hosts.allow states:
# Wrapping sshd(8) is not normally a good idea, but if you
# need to do it, here's how
#sshd : .evil.cracker.example.com : deny

Another way would be to implement this behavure with a firewall like
ipfw or ipf.

-- 
Alex

Articles based on solutions that I use:
http://www.kruijff.org/alex/FreeBSD/


More information about the freebsd-questions mailing list