topic Re: restricting ssh... in Operating System - Linux

restricting ssh...

K.C. Chan — Wed, 21 Sep 2005 19:50:59 GMT

all,
I have eth0 and eth0:1, I want to run apache on eth0:1 but do not want any one to be able to ssh to eth0:1. I know how to restrict ssh login vi ip address, but do not know how to do it just for eth0:1. Does any any know how? Thanks.

Re: restricting ssh...

Steven E. Protter — Wed, 21 Sep 2005 23:23:05 GMT

ssh has a ssh_config file set. You can restrict access and ssh server listening based on the IP address you have assigned.

There is a Listen directive. Usually its set to 0.0.0.0 which means all IP addresses. It can however be repeated and set to individual IP addresses.

SEP

Re: restricting ssh...

Nils_9 — Wed, 21 Sep 2005 23:55:10 GMT

You can also use Iptables or a front-end (shorewall for example) to create 2 zones, and custom rules for each zone.

Re: restricting ssh...

Arunvijai_4 — Thu, 22 Sep 2005 00:24:39 GMT

Chan,

You can use /etc/ssh/ssh_config to restrict IP. Or you can use IP tables in Linux.

-Arun

Re: restricting ssh...

Gopi Sekar — Thu, 22 Sep 2005 01:09:11 GMT

use /etc/ssh/sshd_config file to restrict logins by ip address subnet. you can also use iptables to prevenet ssh port access (port 22) to eth0:1

Also SSH supports tcp_wrappers you can enable/disable access to ssh based on IP address by adding necessary configuration to /etc/hosts.allow and /etc/hosts.deny file

Regards,
Gopi

Re: restricting ssh...

VEL_1 — Thu, 22 Sep 2005 01:41:23 GMT

Hi,

You can use the ipmasq package, then disable the masqing portion of it. Just see the rules.

You can use DNS to run on a particular interface or ip. You can restrict the other services through ipchains - creating the rules in the /etc/ipmasq/rules directory. In Apache, we may specify the IP addresse to listen.

Thanks.

Re: restricting ssh...

Raj D. — Thu, 22 Sep 2005 06:20:37 GMT

Hi K.C ,

If you make /etc/nologin , totoal ssh will be restricted ,

Though you can configure the file ssh_config ,

hth,
Raj.

Re: restricting ssh...

Ivan Ferreira — Thu, 22 Sep 2005 07:59:47 GMT

In the /etc/ssh/sshd_config, configure the option:

ListenAddress

Re: restricting ssh...

K.C. Chan — Sun, 25 Sep 2005 08:40:08 GMT

thanks, all. I got my answ.