Re: Permit ssh connection from certain IP only

Isn't 1. redundant if you do 2?

People can try to login all day with any username and password they choose, 
and it would be no security risk. 

This would be an especially nice way to collect IP subnets to ban though.



On Monday 20 March 2006 1:29 pm, Michael Papet wrote:
> Hi Mark:
>
> A couple of things:
> 1. Change sshd: You should do this in
> /etc/ssh/sshd.conf. (or whatever your distro has)
> Change the port used by ssh.  If you don't there are
> many script kiddies probing for the ssh open port,
> then trying dumb username/password combinations.
>
> 1a. You can open that new port with guarddog as a
> user-defined port.
>
> 2.  I recommend changing from password authentication
> to a key-based authentication. The common type is
> using an RSA key. It's a little work to set up, but
> great peace of mind because sshd won't allow any
> logins from pc's that don't have the right keys.
>
> Michael
>
> --- Mark Neidorff <[email protected]> wrote:
> > Isn't what you want to do a function of the sshd
> > authentication, not of the
> > firewall?
> >
> > On Saturday 18 March 2006 08:04 am, Istvan Vegh
> >
> > wrote:
> > > Hello,
> > >
> > > Is it possible to enable an SSH connection from a
> >
> > certain IP only ?(I would
> >
> > > like to connect from my workplace over ssh to my
> >
> > home pc. I'd like to
> >
> > > enable the SSH connection from that IP (eg.
> >
> > 212.40.x.x)only.)
>
> -------------------------------------------------------
>
> > This SF.Net email is sponsored by xPML, a
> > groundbreaking scripting language
> > that extends applications into web and mobile media.
> > Attend the live webcast
> > and join the prime developer group breaking into
> > this new coding territory!
>
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>
> > _______________________________________________
> > Guarddog-user mailing list
> > [email protected]
>
> https://lists.sourceforge.net/lists/listinfo/guarddog-user
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live
> webcast and join the prime developer group breaking into this new coding
> territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Guarddog-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/guarddog-user


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642