Restrict sftp access and changing its port
 

Hey,

I tried changing the sftpserver port but its not working, besides how can i restrict users from particular ips.

Eg: users a can ssh from 192.168.*.*
user b can sftp from 200.*.*.*

how we can do this?

errm...couple of things.
you can only change the sftp port if you change the ssh port. you can do that in sshd_config

you can use iptables to limit from ip address
you can use /etc/security/access.conf to limit from ip address
you can use tcpwrappers since sshd has libwrap compiled in


forgot to add - once you have changed the sshd port, restart ssh and use

for future sftp actions

If you use key based authentication, then you can add the ip address of each user to each users authorized_keys2 file.
This will limit connections to that account to that ip address.