How can I block IP address range with sshd_config

Colin Paul Adams colin at colina.demon.co.uk
Tue Jul 27 17:14:37 UTC 2004


>>>>> "Michael" == Michael Sullivan <michael at espersunited.com> writes:

    Michael> I've been reading over the hosts.deny man page to get
    Michael> some ideas, but I'm unclear on how to implement them.  I
    Michael> know what I want to do, but I don't know how to do it.  I
    Michael> want to allow all connections from my five users, those
    Michael> being acsacx, amy, michael, wayne and zack, unless those
    Michael> requests come from 211.182.241.* These acceptable
    Michael> accounts will likely only log in through ssh.  I want to
    Michael> deny 211.182.241.* unconditonally.  Can anyone give me an
    Michael> example of a hosts.allow/hosts.deny setup that would do
    Michael> this?

Tackle the two issues separately. Block the IP address as suggested in
hosts.deny.

The edit sshd_config and specifically list those users who are allowed
to connect to the system with the AllowUsers keyword (check the man
page for sshd_config).)
-- 
Colin Paul Adams
Preston Lancashire





More information about the fedora-list mailing list