From owner-freebsd-questions@FreeBSD.ORG Mon Aug 15 19:20:10 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 02A5516A41F for ; Mon, 15 Aug 2005 19:20:10 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail23.sea5.speakeasy.net (mail23.sea5.speakeasy.net [69.17.117.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id BC63C43D53 for ; Mon, 15 Aug 2005 19:20:08 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 11881 invoked from network); 15 Aug 2005 19:20:08 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail23.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 15 Aug 2005 19:20:08 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 561A937; Mon, 15 Aug 2005 15:20:07 -0400 (EDT) Sender: lowell@be-well.ilk.org To: Daniel Gerzo References: <20050815190802.5a9fb97b@apircalabu.dsd.ro> <108439145.20050815183812@rulez.sk> From: Lowell Gilbert Date: 15 Aug 2005 15:20:07 -0400 In-Reply-To: <108439145.20050815183812@rulez.sk> Message-ID: <44wtmn57o8.fsf_-_@be-well.ilk.org> Lines: 11 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd-questions@freebsd.org, Carstea Catalin Subject: Re: Only some IP's (SSHd) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Aug 2005 19:20:10 -0000 > > If you would like to permit ssh logins from specific IP addresses you > > should take a look at: > > > man 5 hosts_access > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/tcpwrappers.html > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html > > It is also possible to do it via AllowUsers directive in sshd_config No, that is a slightly different (and complimentary) measure. It affects *who* may log in, not *where* logins may come from.