Setting up SSH to bind to one and only one IP address

Harlin · 06-06-2006, 12:54 PM

I have a server with two IP addresses... one address is for external (to the WWW) and the other is internal. I changed /etc/ssh/sshd_config to show:

ListenAddress 10.31.164.18

After this, I restarted it. It is still listening on both IP addresses.

Anyone know how to fix this?

Thanks,

Harlin

win32sux · 06-06-2006, 07:54 PM

are both of those IPs on the same NIC?? or do you have two NICs??

cuz my best guess is that sshd just binds to the interface on which the given IP is... if that's the case, and you only have one NIC, then that might explain why you are getting this behavior... you could always forget about the "ListenAddress" thing and instead filter the packets using iptables...

just my

...

nx5000 · 06-07-2006, 02:16 AM

It works for me if I put 127.0.0.1

Maybe activate some logging in sshd_config and look at log files?

again

Harlin · 06-07-2006, 05:47 AM

My goof... we are using a very smart routing configuration at work -- the 10.xxx segment is part of a VPN -- if you're inside then it will automatically send you to that 10. address when using the DNS name. When I try to access it via the external address it times out :-)

win32sux · 06-07-2006, 05:53 AM

Quote:

Originally Posted by Harlin

My goof... we are using a very smart routing configuration at work -- the 10.xxx segment is part of a VPN -- if you're inside then it will automatically send you to that 10. address when using the DNS name. When I try to access it via the external address it times out :-)

cool, i wouldn't have ever imagined it was NAT-related... i assumed you had done a netstat and had actually seen sshd listening... anyways, it's good to hear everything's okay...

Harlin · 06-07-2006, 07:16 AM

oh no.. im not that advanced ;-)