Guarddog/SSH Question

bad_andy · 01-28-2005, 12:29 PM

Suppose I want to allow only myself to remotely log onto my office server via SSH. Can I configure Guarddog to block everyone else but me?

leonscape · 01-28-2005, 02:09 PM

Yes, on your office server create a new zone, and place your home IP address in that zone, and select local on the connection part.

Then goto the protocols tab and select the new zone, and allow access for ssh ( tick ).

bad_andy · 01-28-2005, 02:14 PM

Thanks, I'll give it a try.

leonscape · 01-28-2005, 02:23 PM

Just one thing, When you goto the protocol tab, don't select the new zone, select local, and tick ssh in the new zones column.

Got mixed up as to which way things are worked out

bad_andy · 01-28-2005, 03:02 PM

Thanks for your help so far, but I've got another question for you...

My network has a print server on it, and when I enable Guarddog, nothing prints. What do I have to do get around that problem?

bad_andy · 01-28-2005, 06:53 PM

Hey leonscape, is this another SSH approach?:

hosts.deny
sshd ALL EXCEPT 192.168.xxx.xxx

leonscape · 01-28-2005, 07:10 PM

What port are you using? are we talking CUPS or something else?

As for the other sshd method probably okay, but I don't know how iptables will react to having a different set of rules.

bad_andy · 01-28-2005, 07:24 PM

Yeah, I think it's CUPS--let's assume so. (I didn't set this system up, and Linux is fairly new to me).

I think I saw something about port 413, not 100% sure though.

leonscape · 01-29-2005, 03:10 PM

I think its port 631.

On the print server go to the advanced Tab in guarddog, and click New protocol fill in the name, and set the port to 631 then go back to the protocol tab, and click local on the left go down to the user defined group, and click on the cups protocol to allow access, to which ever zone the client machines are listed in.

bad_andy · 01-29-2005, 03:17 PM

Thanks leonscape, but I figured it out this morning.

The print server uses LPS, not CUPS. Using its network IP address, I created a new zone for the print server and enabled the Line Printer Spooler protocol between it and Local. Works like a charm now!

leonscape · 01-29-2005, 03:31 PM

Glad to hear you got sorted.