sshd interface restrictions

acid_kewpie · 11-28-2001, 04:00 AM

hi, can anyone tell me how i acn restrict user logins on a per interface / ip basis? i want to be able to log in as anyone on my server inside my network, but only as a single certain user from an external ip address. Can i configure sshd to check users dependent on either teh interface (eth1 / eth0) or the ip address (10.x.x.x / else ) ?

hurtsman · 11-28-2001, 06:57 AM

hi,
you can write some items to two files, "/etc/hosts.deny" and "/etc/hosts.allow". Using these both, you can control who and where can be accessed to your box. Of course, linux2.4 ,you can use iptables to control accesses based on ip address and ports ,not user.
Best Regards.
From Shanghai,China.
Nov. 28,2001