Linux -Blue forest free software | Return to home page | Site Map | Search WWW | Contact Us |
Your current position : Homepage > Free Software > Technological exchanges >System Management


    

Blue Forest http://www.lslnet.com at 3:18 p.m. on August 18, 2006


Ssh user landing restrictions

I want to restrict a network of users can ssh landing of the plane, a network of not landing, will be used to control host.allow? Tcp-wrapper Xineted Lane appears to be to control the services seems to be, neighborhoods. .

Ssh user landing restrictions

Default, the sshd from Xineted possession, but could support tcpd.
You can set up a hosts.allow :
Sshd : 192.168.0.
Sshd : ALL : deny

Of course, you have to use iptables :
Iptables - I INPUT-p tcp --dport 22 -j DROP
Iptables - I INPUT-p tcp-s 192.168.0.0/32 -j ACCEPT --dport 22
(Note : - I order, and can we reverse the order. . . )

Ssh user landing restrictions

Added an important qualification :

If you want to limit what users can, and AllowUsers AllowGroups man sshd_config room set.
Or pam walk :
1) Revise /etc/pam.d/sshd
Diez required pam_listfile.so item=user sense=allow file=/etc/sshusers onerr=fail
2) You have to be written into /etc/sshusers users, such as :
Echo "root", ";>; /etc/sshusers

Ssh user landing restrictions

Net and write detailed Frank : lol :.

Ssh user landing restrictions

Bravo, even now to test



 Privacy Policy  Copyright © 1999-2000 LSLNET.COM. All rights reserved. Blue Forest website owners. E-mail : Webmaster@lslnet.com