SSH Security

[Rick Stevens]

Darryl W. DeLao Jr. wrote:
> How can I tell the SSH server to only allow certain IP’s the ability to 
> login?

Assuming your sshd was compiled with tcpwrappers enabled (the Fedora and
Red Hat versions are), edit /etc/hosts.deny and add this line:

	sshd : ALL

Edit /etc/hosts.allow and add lines for each allowable IP.  The lines
can take one of two forms:

	sshd : ip-address		(to only allow SSH access)
	ALL : ip-address		(to allow total access)
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-           Fear is finding a ".vbs" script in your Inbox            -
----------------------------------------------------------------------