Re: Novell/Suse Linux firewall questions

From: Edward Buck (ed_at_bashware_REMOVEME_.net)
Date: 12/29/04 

Date: Tue, 28 Dec 2004 23:42:08 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Edward Buck wrote:
| Chris Cox wrote:

| | From man sshd_config
| |
| | AllowUsers
| | This keyword can be followed by a list of user name
| patterns,
| | separated by spaces. If specified, login is allowed only
| for
| | users names that match one of the patterns. `*' and `'?
| | can be
| | used as wildcards in the patterns. Only user names are
| | valid; a
| | numerical user ID is not recognized. By default, login is
| | allowed for all users. If the pattern takes the form
| | USER@HOST
| | then USER and HOST are separately checked, restricting
| | logins to
| | particular users from particular hosts.
|
| Yeah, I know about the AllowUsers directive. It can limit by host in
| the context of specific users, which isn't the same as IP-based access
| control. The original poster had asked about ip-based access.

Just following up on my own post. It occurred to me that the wildcard form:

*@ip.add.re.ss

could work to provide ip-based access control. Has anyone used this
form in practice?

Thanks.
Ed
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFB0l/O+8K5zYeYuXsRAvDbAJwLTgGK4vpTBLt55oivio9ozMKj+gCfTiNZ
XwAfAI/zbWR0wg3BTFnySuY=
=Ym16
-----END PGP SIGNATURE-----

Quantcast