Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Apr 2008 18:17:20 -0500
From:      Paul Schmehl <pauls@utdallas.edu>
To:        Gilles <gilles.ganault@free.fr>, freebsd-questions@freebsd.org
Subject:   Re: [SSHd] Limiting access from authorized IP's
Message-ID:  <1BAE8CB205D00540B5A4504F@utd65257.utdallas.edu>
In-Reply-To: <i37i04lb137hus1akad67vjlcb022ftbob@4ax.com>
References:  <2tng04doovnmtkr7or9kfkb596fgjfoj1c@4ax.com> <48086425.5080608@wire-consulting.com> <i37i04lb137hus1akad67vjlcb022ftbob@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--On Saturday, April 19, 2008 00:12:41 +0200 Gilles <gilles.ganault@free.fr> 
wrote:

> On Fri, 18 Apr 2008 10:04:37 +0100, FreeBSD - Wire Consulting
> <freebsd@wire-consulting.com> wrote:
> (snip)
>
> Seems like I didn't do it right:
>
> /etc/ssh/sshd_config:
> [...]
> AllowHosts 192.168.0 82.227.x.x
>
># /etc/rc.d/sshd restart
> Stopping sshd.
> Starting sshd.
> /etc/ssh/sshd_config: line 119: Bad configuration option: AllowHosts
> /etc/ssh/sshd_config: terminating, 1 bad configuration options
>

I don't see an "AllowHosts" option in man (5) sshd_config.  There's 
AllowGroups, AllowTcpForwarding, AllowUsers, but no AllowHosts.

If you want to restrict sshd logins by host, you can use AllowUsers like this:

AllowUsers user1@host1 user1@host2 user1@host3 user2@host1 user2@host6

etc., etc.  The list is space-separated on a single line.

-- 
Paul Schmehl (pauls@utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1BAE8CB205D00540B5A4504F>