Which IP can use ssh

[j773303]

Telnet can use /var/adm/inetd.sec to decide which IP can not use it. Does anyone knows how to let some IP cannot use ssh(replace telnet)?

Thanks.

[Arunvijai_4]

Hi,

TCPWrapper is one way to do.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=TCPWRAP

I remember, there is a patch available for SSH to use /var/adm/inetd.sec. I am not sure whether it had merged into main code of SSH.

-Arun

[Steven E. Protter · Accepted solution]

Shalom,

The file ssh_config or sshd_config can control to some degree what IP's are permitted.

There is a listen statement, which is set to 0.0.0.0 which means all ip's. This can be changed to limit access.

Further fine tuning can be done as well.

sshd must be stopped and then started to take advantage of these features.

SEP

[Steven E. Protter]

Shalom,

The file ssh_config or sshd_config can control to some degree what IP's are permitted.

There is a listen statement, which is set to 0.0.0.0 which means all ip's. This can be changed to limit access.

Further fine tuning can be done as well.

sshd must be stopped and then started to take advantage of these features.

The ipfilter firewall can be configured and used to block access to certain ip addresses or ranges.

SEP