Forhindre adgang til ssh

AllowUsers *@192.168.0.1 *@10.0.0.1

AllowUsers er kun til som den siger _user_

hvorimod AllowHosts er til adresser desværre er AllowHosts kun til ssh2 hvilket jeg ikke bruger

fandt selv løsningen:

brug dette
/etc/hosts.allow
/etc/hosts.deny

# hosts.deny
ALL: ALL

# hosts.allow
ssh: xxx.xxx.xxx.xxx, yyy.yyy.yyy.yyy

lukker

well jeg vil gerne koorigere det lidt; din løsning gælder kun hvis du kører ssh under inetd. En anden måde ville være at gøre det igennem iptables/ipchains.


se også nedenstående:
hosts.allow & hosts.deny

These files control the basic access to inetd controlled services. They are both located in /etc. Help is available by executing

    man hosts.allow

First - you need to edit hosts.deny to read as follows:

    ALL: ALL

This says that by default, deny everyone to everything. This is not a firewall! The two are different!

Now you need to edit hosts.allow and start letting some sort of traffic in. The format will be as follows:

    in.ftpd: 172.16.50.2
    in.identd: ALL

Now the only available external service is identd, and only the machine at 172.16.50.2 can ftp. Simple, tight security eh?  Well, not exactly.  The inetd service doesn't cover all available external services.  Samba and httpd are both served directly.  It is much more secure to add a packet filtering firewall to control service access to your machine, but inet is a valuable part of host security.