Allow SSH from specific IP's ONLY.

m15a4 · 12-25-2003, 01:06 AM

Where can I specify the IP of the PC that will be logging in via ssh?

chort · 12-25-2003, 01:29 AM

Edit /etc/hosts.allow
sshd: 1.2.3.4

You should also block all inbound traffic to port 22 with iptables, and make a special allow rule just for the IP (src 1.2.3.4) you want to allow. Of course, replace 1.2.3.4 with your actual IP.

fr0zen · 12-29-2003, 03:43 AM

What if your IP is semi-dynamic? That is, mine changes every 3 weeks or so. Sometimes every week, or month. Kind of random. Though, the changes only involve the last 2 octets.

Anyway to restrict it based on hostname?

Capt_Caveman · 12-29-2003, 04:02 AM

You can use tcpwrappers to restrict based on partial IPs, like :
SSHD: 123.456.

It can also restrict by hostname as well. So if you got a completely differnt IP you could still use:

SSHD: .jibib-east.aol.com or just .aol.com