Re: Permit ssh connection from certain IP only
Michael Papet <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
Hi Mark: A couple of things: 1. Change sshd: You should do this in /etc/ssh/sshd.conf. (or whatever your distro has) Change the port used by ssh. If you don't there are many script kiddies probing for the ssh open port, then trying dumb username/password combinations. 1a. You can open that new port with guarddog as a user-defined port. 2. I recommend changing from password authentication to a key-based authentication. The common type is using an RSA key. It's a little work to set up, but great peace of mind because sshd won't allow any logins from pc's that don't have the right keys. Michael --- Mark Neidorff <[email protected]> wrote: > Isn't what you want to do a function of the sshd > authentication, not of the > firewall? > > On Saturday 18 March 2006 08:04 am, Istvan Vegh > wrote: > > Hello, > > > > Is it possible to enable an SSH connection from a > certain IP only ?(I would > > like to connect from my workplace over ssh to my > home pc. I'd like to > > enable the SSH connection from that IP (eg. > 212.40.x.x)only.) > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a > groundbreaking scripting language > that extends applications into web and mobile media. > Attend the live webcast > and join the prime developer group breaking into > this new coding territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > Guarddog-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/guarddog-user > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642