ssh query

[Jim Adamson]

Can anyone tell me how to restrict network access to ssh. We are using hp-ux secure shell A.03.81.002. I want to give access to certain subnets only.

Ssh is not listed in inetd.conf so I don't think an entry in inetd.sec will work. We are using hpux11i.

thanks
Jim

[Laurent Menase]

you can use ipfilter

[harry d brown jr]

Strange request, but like Laurent said ipfilter: http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

live free or die
harry d brown jr

[Przemyslaw Staszkiewicz]

I don't remember if A.03.81.002 is compiled with Tcp_wrappers support (but i guess it is), if so, you can restrict acces to your sshd using /etc/hosts.allow & /etc/hosts.deny files according to appropriate manuals.

hth
pszemek

[RAC_1 · Accepted solution]

You have two options.

1. Put sshd in /etc/inetd.conf. (doesn't hurt) and then user /var/adm/inetd.sec to block the access. - EASY CHOICE
2. HP SSH comes with built in tcp wrappers. Make use of /etc/hosts.deny file.
sshd : 10.9.34.22, 10.34.23.xx

If I were you, I would go with first choice.

[Jim Adamson]

Thanks, I'll try a tcp_wrapper then ipfilter.

Jim

[Jim Adamson]

thanks