Re: SSH security

From: Bryan Paxton (evil7@deadhorse.net)
Date: 10/19/01 

Subject: Re: SSH security
From: Bryan Paxton <evil7@deadhorse.net>
To: Brian Clifton <brian@omegadm.co.uk>
Date: 19 Oct 2001 11:17:43 -0500
Message-Id: <1003508263.25294.7.camel@sQa.deadhorse.net>

On Fri, 2001-10-19 at 08:57, Brian Clifton wrote:
> Does anyone know how to restrict ssh login access to certain ip's??
> e.g. like host.allow does? I have found un-authorised attempts trying
> to log in via ssh in var/logs/secure..

 Well, you could run sshd our of inetd, and use tcp_wrappers (I only
recommend tcp wrappers when it is a must situation).
But I would recommend filtering at the kernel level (ipchains,
netfilter, etc...).
The best approach would be to set up a ruleset that states the hosts
that are allowed to contact your box on port 22, then to deny to all
other traffic inbound for port 22 on your box.

Cheers
  

-- 
Bryan Paxton
Public PGP key: http://www.deadhorse.net/evil7.gpg

Relevant Pages

  • Re: ssh gives "Permission denied, please try again"
    ... port 22 on your internal machine, so you will need to keep ssh up to ... I configure the router to forward a different external port to 22 on my ... For good measure pick usernames that are none obvious, ... root/password: 163 times ...
    (uk.comp.os.linux)
  • [NEWS] SSH service at Dell DRAC4 Denial of Service (Mocana)
    ... SSH service at Dell DRAC4 Denial of Service ... Dell Remote Access Card 4 allows customers to effectively manage ... After the use of such a port scanner, ...
    (Securiteam)
  • Re: Remote Desktop directly to another computer on the network
    ... default port... ... And there is no reason for me to believe that ssh ... When I have a multibillion company I will use the key pair, ... WinSCP for that to access my home SSH server. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: SSH safety
    ... SSH safety (J.L. ... FC3 missing KDE menu items ... I was wondering how safe it is to open the ssh port up to the internet. ...
    (Fedora)
  • Re: FTPS Server?
    ... port numbers by deep packet inspection. ... client, but the underlying SSH protocol over the network is way, way ... See the chroot configuration in the man-page for sshd_config ... recommend running a separate instance on a separate port (if firewalls ...
    (freebsd-stable)