sshd_config

From: Ben (l33t_at_hax0r.not.com)
Date: 03/31/04


Date: Wed, 31 Mar 2004 00:25:03 GMT

I want to specify different ssh ports for different hosts on my network.

After reading the man page for sshd_config I am still not clear precisely
how to do this (testing is difficult as I have no physical access to the
device at the moment and don't want to kill my session).

Basically for local client 10.0.0.10 I want to use port 22.

For remote hosts being NAT'd to a local address 10.0.0.1 I need to use port
222.

You can only specifiy one blanket port to listen on but I would rather not
specify any, as because I am using NAT all hosts appear to be local.

ListenAddress is clearly the option I need to use however, the man page
doesn't say whether I can delete the blanket 'ports' entry in the conf file
or whether these work in conjunction.

e.g.

Ports 22
ListenAddress 10.0.0.1:222

or just

Ports
ListenAddress 10.0.0.1:222
ListenAddress 10.0.0.10:22



Relevant Pages

  • Re: Nmap udp scan
    ... specifying different ports for UDP and TCP scans. ... did not specify a scan type, so it defaulted to TCP. ...
    (Security-Basics)
  • portversion -l ">"
    ... I am having a problem after upgrading my ports. ... I run portversion -l ">" and ... or specify -O to force. ... (running in non-interactive mode; ...
    (comp.unix.bsd.freebsd.misc)
  • RE: How to change webport names?
    ... ports yourself. ... The Specify Now builds the dynamic port names for you, ... when you deploy your orchestration, the "Specify Now' ports are automatically ... want to override any of the port properties, you have to do it in the ...
    (microsoft.public.biztalk.general)
  • Re: SL Mail SMTP
    ... specify 25. ... *Technically* clients are supposed to submit messages on ports 465 or 587 whereas MTA's are supposed to transfer messages between each other via port 25. ... However for obvious reasons MTAs still have to listen on all three ports anyway and people find it easier to remember the number 25, so that's what's ended up being used by pretty much everybody. ... So when you're using a third party MTA like MobileMe or Google, a lot of people have to use 465 or 587 to get the email out. ...
    (uk.comp.sys.mac)
  • Re: Send Port Functionality
    ... Specify Later in the long run though. ... Find your send port that was created by your Orchestration ... Change it to Overwrite ... > creates the Send Ports for me when the orchestration is deployed. ...
    (microsoft.public.biztalk.general)