Best way to limit SSH to LAN IP's only ?

[Nelis Lamprecht]

On Fri, 2004-07-23 at 14:20, Graham Bentley wrote:
> Hi All,
> 
> Wondered what is the best way to do this ?
> 
> Do I have to get involved with host.allow / deny
> or better to use the sshd config ?
> 

If this system has 2 interfaces, one LAN and one Internet then all you
need to do is configure sshd to listen on the LAN interface.

in sshd_config:

ListenAddress your.lan.interface.ip

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040723/22b36e15/attachment.bin