SSH Security

[Res]

On Sat, 10 Dec 2005, wwp wrote:

>> Key based authentication is the right way to go.  You should disable
>> root ssh access completely.

So long as the machine with the kay is also very well protected or it is 
just as exposed as if it were directly.

>
> BTW, is there a way to make ssh allowing root access from a specific
> interface (local for instance) and denying it from other ones (external)?
>

man securetty


-- 
Cheers
Res