Re: sshd on netbsd---fix so only one external machine can get in?

From: m. kolb (muk_at_nibbler.cl.msu.edu)
Date: 12/10/04

  • Next message: athoren_at_sandiegobloodbank.org: "Re: sshd on netbsd---fix so only one external machine can get in?" 
    Date: Fri, 10 Dec 2004 10:34:17 -0500

    "bsd_mike" <bsd_mike@hotmail.com> writes:

    > Is it possible to configure sshd such that only one external
    > machine can get in?

    from SSHD_CONFIG(5):

    AllowUsers

      This keyword can be followed by a list of user name patterns,
      separated by spaces. If specified, login is allowed only for user
      names that match one of the patterns. `*' and `?' can be used as
      wildcards in the patterns. Only user names are valid; a numerical
      user ID is not recognized. By default, login is allowed for all
      users. If the pattern takes the form USER@HOST then USER and HOST
      are separately checked, restricting logins to particular users from
      particular hosts.

    You can do something like
        AllowUsers bsd_mike@bsd_mike.com
    in your /etc/ssh/sshd_config to only allow that account access.

    Don't forget to /etc/rc.d/sshd restart 

    -- 
m. kolb  <muk@msu.edu> | <muk@nibbler.cl.msu.edu>
  • Next message: athoren_at_sandiegobloodbank.org: "Re: sshd on netbsd---fix so only one external machine can get in?"

    Relevant Pages

    • Re: sshd attacks
      ... starts trying a user dictionary attack on sshd? ... ssh allows you to specify which users may login and you may further restrict it to a particular user from a particular host. ... This keyword can be followed by a list of user name patterns, ...
      (comp.unix.bsd.freebsd.misc)
    • Re: ssh password problem
      ... using rsa public keys. ... This keyword can be followed by a list of user name patterns, ... Login is disallowed for user names that ... The allow/deny directives are processed in the following ...
      (Fedora)
    • Re: Disabling access to SSH
      ... > but which ssh are you using? ... This keyword can be followed by a list of user name patterns, ... By default, login is ... then USER and HOST are separately checked, ...
      (Debian-User)
    • Re: BLOCK SSH FOR CERTAIN USERS
      ... This keyword can be followed by a list of user name patterns, ... login is allowed for all ... HOST are separately checked, restricting logins to particular ...
      (comp.unix.aix)
    • Re: BLOCK SSH FOR CERTAIN USERS
      ... This keyword can be followed by a list of user name patterns, ... login is allowed for all ... HOST are separately checked, restricting logins to particular ...
      (comp.unix.aix)