RE: SSH Security

From: Michael Anaya (mianaya_at_edatatrace.com)
Date: 10/01/04

  • Next message: Rebecca.R.Hepper_at_seagate.com: "Re: GRUB Boot Fails on P3 without Keyboard" 
    To: "'General Red Hat Linux discussion list'" <redhat-list@redhat.com>
Date: Fri, 1 Oct 2004 10:31:07 -0700

    From: redhat-list-bounces@redhat.com [mailto:redhat-list-bounces@redhat.com]
    On Behalf Of Alexey Fadyushin
    Sent: Thursday, September 30, 2004 10:02 AM
    To: ddelao@oucpm.org; General Red Hat Linux discussion list
    Subject: Re: SSH Security

    You should use option AllowUsers in file /etc/ssh/sshd_config. This option
    lists the names of users which are allowed to connect via ssh and host
    from which them are allowed to connect. For example:
    AllowUsers: *@192.168.11.1
    should allow any user to connect from host 192.168.11.1. Connections
    from other addresses willn ot succeed.

    Also you can use files /etc/hosts.allow and/or /etc/hosts.deny which
    define restrictions for connections to daemons which use libwrap (SSH
    does use it).

    It is also possible to filter incoming connections to port ssh with
    iptables, so the packets from any hosts not allowed to connect to SSH
    will be dropped.

    Alexey Fadyushin.
    Brainbench MVP for Linux
    http://www.brainbench.com

    Darryl W. DeLao Jr. wrote:
    > How can I tell the SSH server to only allow certain IP's the ability to
    > login?

    AllowUsers is a list of local user accounts allowd to ssh in.
    AllowUsers: username1 username2 username3

    The option you are looking for:
    ListenAddress ###.###.###.###:port

    Both supported using protocol 2

    HTH 

    -- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Rebecca.R.Hepper_at_seagate.com: "Re: GRUB Boot Fails on P3 without Keyboard"

    Relevant Pages

    • RE: sshd / ssh setup
      ... We have an Remote FreeBSD system which is located some where on the ... This method gives the maximum protection possible utilizing ssh. ... Host setup steps. ... Reboot your system to activate sshd and login as root. ...
      (freebsd-questions)
    • SSH filter transer, was Re: Soft Update - directory/file listing
      ... But SSH file transfer is painfully slow all the time. ... ## SSH 3.2 Server Configuration File ... # Note that forwardings using the name of this host will be allowed (if ...
      (freebsd-performance)
    • Re: Disable name canonicalization for OpenSSH GSSAPI
      ... The issue I'm having is with a new server ... I'm unable to setup the correct reverse ... When I attempt to connect to this host with SSH, ...
      (comp.protocols.kerberos)
    • Re: [opensuse] Re: OpenSUSE PuTTY ?
      ... PuTTY lets you set up all kinds of special options, tied to which host ... The ssh daemon on the host machine is usually activated by default, ... As a taster to open a remote session in a new window in any konsole ... Windows users should explore Cygwin as this will allow you to run ssh ...
      (SuSE)
    • Re: hacked?
      ... So I ssh'd in and did a netstat and saw what looked like an unwanted SSH connection... ... On the local host type nmap -sV localhost -p 1-65535 to see what ports respond and which apps/services. ...
      (comp.os.linux.misc)