topic Re: ssh query in Operating System - HP-UX

ssh query

Jim Adamson — Thu, 31 Mar 2005 05:16:14 GMT

Can anyone tell me how to restrict network access to ssh. We are using hp-ux secure shell A.03.81.002. I want to give access to certain subnets only.

Ssh is not listed in inetd.conf so I don't think an entry in inetd.sec will work. We are using hpux11i.

thanks
Jim

Re: ssh query

Laurent Menase — Thu, 31 Mar 2005 05:23:43 GMT

you can use ipfilter

Re: ssh query

harry d brown jr — Thu, 31 Mar 2005 07:29:30 GMT

Strange request, but like Laurent said ipfilter: http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

live free or die
harry d brown jr

Re: ssh query

Przemyslaw Staszkiewicz — Thu, 31 Mar 2005 07:29:43 GMT

I don't remember if A.03.81.002 is compiled with Tcp_wrappers support (but i guess it is), if so, you can restrict acces to your sshd using /etc/hosts.allow & /etc/hosts.deny files according to appropriate manuals.

hth
pszemek

Re: ssh query

RAC_1 — Thu, 31 Mar 2005 07:47:50 GMT

You have two options.

1. Put sshd in /etc/inetd.conf. (doesn't hurt) and then user /var/adm/inetd.sec to block the access. - EASY CHOICE
2. HP SSH comes with built in tcp wrappers. Make use of /etc/hosts.deny file.
sshd : 10.9.34.22, 10.34.23.xx

If I were you, I would go with first choice.

Re: ssh query

Jim Adamson — Thu, 31 Mar 2005 07:48:09 GMT

Thanks, I'll try a tcp_wrapper then ipfilter.

Jim

Re: ssh query

Jim Adamson — Thu, 31 Mar 2005 07:49:12 GMT

thanks