How to setup a host.deny and host.allow for SSH?

explorer1979 · 01-27-2005, 04:33 AM

Hi all,

I am using Windows XP with the cygwin + OpenSSH to build up a SFTP Server.

But for some reason, I don't want to build a linux box for a standalone SFTP server.

I want to ask, how to set up a host.deny for deny all internet user can login to the SFTP server, but if I want just one IP, for example, 203.88.122.166 this IP can login to the SFTP Server?

How to? And need enter what inform to the host.deny and host.allow file??

thx

Jimmy Chan
---------------
http://www.wusogorphoto.net

peacebwitchu · 01-28-2005, 02:12 PM

hosts.deny

sshd ALL EXCEPT 192.168.254.2

Moloko · 01-31-2005, 05:28 PM

The hosts.allow file is checked before hosts.deny, so make sure the rules don't conflict. Allowing things should be in the allow-file, like:
sshd: xxx.xxx.xxx.xxx or
sshd: ALL: spawn (echo "Attempt from %h %a to %d at `date` by %u" | tee -a /var/log/sshd.log)

The last line also logs any attempts.