|
Blue Forest http://www.lslnet.com at 3:18 p.m. on August 18, 2006
Ssh user landing restrictions I want to restrict a network of users can ssh landing of the plane, a network of not landing, will be used to control host.allow? Tcp-wrapper Xineted Lane appears to be to control the services seems to be, neighborhoods. . |
Ssh user landing restrictions Default, the sshd from Xineted possession, but could support tcpd.
You can set up a hosts.allow :
Sshd : 192.168.0.
Sshd : ALL : deny
Of course, you have to use iptables :
Iptables - I INPUT-p tcp --dport 22 -j DROP
Iptables - I INPUT-p tcp-s 192.168.0.0/32 -j ACCEPT --dport 22
(Note : - I order, and can we reverse the order. . . ) |
Ssh user landing restrictions Added an important qualification :
If you want to limit what users can, and AllowUsers AllowGroups man sshd_config room set.
Or pam walk :
1) Revise /etc/pam.d/sshd
Diez required pam_listfile.so item=user sense=allow file=/etc/sshusers onerr=fail
2) You have to be written into /etc/sshusers users, such as :
Echo "root", ";>; /etc/sshusers |
Ssh user landing restrictions Net and write detailed Frank : lol :. |
Ssh user landing restrictions Bravo, even now to test |
| |